XIN CHUN - SHIP'S PARTICULARS[.]xlsx[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XIN CHUN - SHIP'S PARTICULARS.xlsx.lzh
Size

691KB
MD5

f3cd7b580628b5988ab299907e577871
SHA1

b472b4582a09fbe8d846667f9ddcd6117e12c7ed
SHA256

b4dde5d4f3e92bfedf10aa14fefe83f70061645c3bd71b3e444ed5fd7f920bc1
SHA512

66107b6bdc80432d0ed42fca248299fc5e45fd6c9aa0221ba29f477d21e1ae487a4e6cd9c945685959f2c716baa374b3efa85385e2d72ad53adb1ae510db6914
SSDEEP

12288:C+Q+lCwHGNoLMd4IwMwciMkSFT7VKN3a2D1m0H7b7u+LVFI+SJH+4OzxP8p:Cl+ZHGNoLMdNhb1V4U2kgzXb0Lk6p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XIN CHUN - SHIP'S PARTICULARS.xlsx.scr

Files

XIN CHUN - SHIP'S PARTICULARS.xlsx.lzh
.lzh
XIN CHUN - SHIP'S PARTICULARS.xlsx.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 734KB - Virtual size: 734KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ