MV HAMMER SHIP PARTICULARS[.]PDF[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MV HAMMER SHIP PARTICULARS.PDF.lzh
Size

639KB
MD5

9b8c63732a3bcc17bc9c37de8558ee50
SHA1

8d38d4a941b2f8fc4ec8edc2c04f16a0e41366a3
SHA256

8622c57fe0401da8423d3382d156950aa1287a8f689152f4471b5e86cda824a7
SHA512

66d0e2d8a6a6054bf695a8fbc2193c4d76fa955269307b2b11a1589450ef13d0df972d879ae3a77ddcd1a45eb32767eb51a36d399cecd76837e1a677ca2e84b7
SSDEEP

12288:VgFPpXWxUWXkwSRtbDz0BHjmp7xyQGzVYSVjGkv3CZum/2xPk9+WW6SbC:VgFPg1A6IpGBYSVjNv0exxWWDC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MV HAMMER SHIP PARTICULARS.PDF.scr

Files

MV HAMMER SHIP PARTICULARS.PDF.lzh
.lzh
MV HAMMER SHIP PARTICULARS.PDF.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ