KANG SHUN 88 V[.]2315 PARTICULARS[.]docx[.]lzh | Triage

Sharing

General

Target

KANG SHUN 88 V.2315 PARTICULARS.docx.lzh
Size

627KB
MD5

7e4bfee5ce2a69050b4633f2171c3675
SHA1

a5641819462c8ae45b35f0f574133652dc9b0462
SHA256

09ecd31bed05f781b2aaf53dca9a0bffdc1a14960ff7a492a9875fa7b9751b7f
SHA512

626df519ecba351b0a5d8d499bcd68d055ec668aa714ee52a9322c3f3cf874b71dedec4e9ffc906697da3eb3ac7e4429ca909fba43435411c364f439d143a2ca
SSDEEP

12288:aXECRrOAl6xrxvNgk5JrdYIbdxQrkVcuJL8ZzRs7KXKIbq/rm4:IEEOyk1vNV51TxQoVcK8ZWKXKIV4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KANG SHUN 88 V.2315 PARTICULARS.docx.scr

Files

KANG SHUN 88 V.2315 PARTICULARS.docx.lzh
.lzh
KANG SHUN 88 V.2315 PARTICULARS.docx.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 662KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ