MT Fericek - Ship's Particulars (7)(0)[.]pdf[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MT Fericek - Ship's Particulars (7)(0).pdf.lzh
Size

642KB
MD5

c26e4232b60b41ea8dc9bdbba0dd6f94
SHA1

a6596876f51c5e3736ba7702010476e36fb880ab
SHA256

92bb3fc8df100b904e39f26bee075e0795854532dd7dde344ea4f6eed534f594
SHA512

7d747f914a0642162ab384b288a34313034b450405c4ef0cefe95f8b3d4d9da494a179e633a75b763214f7156ab1ea9de11aeaaa9aa7e15f3b1a9fdefb82e6ab
SSDEEP

12288:K4O/PMOnr+FlRKBD0SPqNFkBw8YGfi0V+63ewa1dGU/7Ip:K4uPMAr+R8D1PqNrGfitTy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MT Fericek - Ship's Particulars (7)(0).pdf.scr

Files

MT Fericek - Ship's Particulars (7)(0).pdf.lzh
.lzh
MT Fericek - Ship's Particulars (7)(0).pdf.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

buLz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 691KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ