Q88_GT VICTORY V[.]14[.]docx[.]lzh | Triage

Sharing

General

Target

Q88_GT VICTORY V.14.docx.lzh
Size

642KB
MD5

143ced6fcd23719e097e586c0fbf258c
SHA1

2201b79a67df880c6c30dd082837929d7517ecee
SHA256

fc09aff45013566b12d62e6ff23fcda58f1b4cd9623461c4056bd3d5ca630176
SHA512

d647b68776bbe6c5189aa733555b170b99c8c5cd90edb09a5fe61a896a4c91d2db53f9cb8d02d7162af236babbdb29fb43823c59047c01be7cd3ab30878d5b23
SSDEEP

12288:O4O/PMOnr+FlRKBD0SPqNFkBw8YGfi0V+63ewa1dGU/7Ip:O4uPMAr+R8D1PqNrGfitTy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Q88_GT VICTORY V.14.docx.scr

Files

Q88_GT VICTORY V.14.docx.lzh
.lzh
Q88_GT VICTORY V.14.docx.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

buLz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 691KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ