dd18dd6759f8f926928be4b70e93ca3c44bce634b3c494b742f58356ba811670[.]rar | Triage

Sharing

General

Target

dd18dd6759f8f926928be4b70e93ca3c44bce634b3c494b742f58356ba811670.rar
Size

589KB
MD5

52f6e456c980694df14d23bdf39a9225
SHA1

5eeb3e06effccf5170a387f6dbd0bb30e32c7e70
SHA256

dd18dd6759f8f926928be4b70e93ca3c44bce634b3c494b742f58356ba811670
SHA512

0c7be91e90d88b0b5881606032e37384c179ee63ba2d63a6699f2003fd4fc987101cda6ec11a8fdf4c226731305b5a2f63b715e1a04fa3040796d10e3a8844cf
SSDEEP

12288:QS/nIUNeVFZOZnfX7bCGEzg5eqa5EU+qFUToF3O3BcxRTtL9t:QS/laFMfLbCGEz5v+qTF3xTRP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Vessel's details_pdf.scr

Files

dd18dd6759f8f926928be4b70e93ca3c44bce634b3c494b742f58356ba811670.rar
.rar
Vessel's details_pdf.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

jfrO.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ