3[.]lha | Triage™

General

Target
3.lha
Size 78KB
Sample241115-pg9q2stja1
SHA256 6b1d37510f2465cd2931c4814b85f21115dda4c6694667c734142e03235917ae
MD5 6fe593ea3bb000f802b29e55e8447f6a
SHA1 7eb338c48609b2e3c6e279ad9c4b66844907ec20
SHA512 ed53355349429c95f2516a660057080197e6bd819000eb84ad22d0580ca519964d0a9740806b749401cec7ec74c408d97681b502bc5b8dd220dc515033b95a67
SSDEEP 1536:5BlmbvbLA21Tsoc/TMWpDxcDo0su0usvopF4oqt2n0bjuEavWhshP2G:vlmDIQooc7xpDyo0sVo5xnmuEWP2G
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION_NOVQTRA071244PDF.scr

File Explorer

3.lha

.lzh 78KB
QUOTATION_NOVQTRA071244PDF.scr

.exe 183KB

3.lha

SHA256 6b1d37510f2465cd2931c4814b85f21115dda4c6694667c734142e03235917ae
MD5 6fe593ea3bb000f802b29e55e8447f6a
SHA1 7eb338c48609b2e3c6e279ad9c4b66844907ec20
SHA512 ed53355349429c95f2516a660057080197e6bd819000eb84ad22d0580ca519964d0a9740806b749401cec7ec74c408d97681b502bc5b8dd220dc515033b95a67
SSDEEP 1536:5BlmbvbLA21Tsoc/TMWpDxcDo0su0usvopF4oqt2n0bjuEavWhshP2G:vlmDIQooc7xpDyo0sVo5xnmuEWP2G
MD5 SHA1 SHA512 SSDEEP

QUOTATION_NOVQTRA071244PDF.scr

SHA256 b660914772e3ab830a6d024d2d5d09fb0568240578bdc218516bc91de57e88a2
MD5 49a58ccea100ad0611a27e996e74fd3e
SHA1 ed323734aea95ea4c69a453689e55cc7f4fc9b8f
SHA512 e06b0760f82ea8e63908fcfdde8811d4de6d964338d86cfe4d73913cd39a124033ce1a17b81938afe4a218a3fbdfc050d240c60e34a706d120125710303bb1b3
SSDEEP 3072:Z7kNPz56LkCzxqOL2wMCFIwg/mth9rPkA2AhEV:ZYhzgLkgMOCwMwg/mth9rPkB5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing