17012025_0150_16012025_Vessel Particulars[.]zip | Triage

Sharing

General

Target

17012025_0150_16012025_Vessel Particulars.zip
Size

299KB
MD5

fdf3029173f5b86617581caace495970
SHA1

fe18d3c64c216d6d536f80873a3b6c8762ee5f21
SHA256

46aa4f1d9cfac7afb22ca106dd124be3bcb1c3a412459814a40de1aba167af11
SHA512

dcd8932a7e164d3c7292017d1e0b64f72c57cdc59366fde2a2ca912e6d844f09e92ebdccd9817ac72bec028aab6ae18044f5222bc39e6fa0ef3db46751801732
SSDEEP

6144:/woUY78JEJX7iaoHiPrKyVL2l9HQ0FIgLY43UKJYG6:/wE7v9poHSKyVL10igc0tmG6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Vessel Particulars.exe

Files

17012025_0150_16012025_Vessel Particulars.zip
.zip

Password: infected
Vessel Particulars.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 575KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ