LAQ-PO088PDF_1[.]zip | Triage

Sharing

General

Target

LAQ-PO088PDF_1.zip
Size

502KB
MD5

3f23a4f874593c74e4794d0ee6d107b8
SHA1

39370d845c08420a423de3259ac1b737f2ce6749
SHA256

9fd4ccb584b2bd2df91780727e356c86573d52c38bb3dc43f25468123b3e2086
SHA512

3ede9ba5c88b45a114a00e87ac7be2e039446ffb78291ac77ed7c148e0c9c738317c4943ca185298760a0760d0a07033e41c9be64fc65b8a502f45601d0596ff
SSDEEP

12288:f05khWh/VcRULdN7yVnmx3zDv/sO9/DP/o4NlQ7pmMD:f0Khq6iyNmx3UO9/z/oqlIpma

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack001/LAQ-PO088PDF.exe

Files

LAQ-PO088PDF_1.zip
.zip
LAQ-PO088PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

xNwp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ