xlAutoOpen
Static task
static1
Behavioral task
behavioral1
Sample
Invoice.xll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Invoice.xll
Resource
win10v2004-20220901-en
General
-
Target
Invoice.xll
-
Size
4KB
-
MD5
4f5faac436ec71d1f3b3ef7fc855ffb0
-
SHA1
4a36a8727e44967e5350d61d2f98bc3c0c400b12
-
SHA256
67ae51bbe83bf13476e54073c8448a16f80e52e7fdf0c70520b0de8a65496616
-
SHA512
89f9db3728309e6b406ea0d27f4c10b624cfc4532dacd1808a11ede491748c483afcbaec0e029979777a8ff81b0b409f6fd30dbc42f866db7e26f31378f46f34
Malware Config
Signatures
Files
-
Invoice.xll.xll windows x64
13e99671da6907109c536ea4afa01e7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetProcAddress
FreeLibrary
LoadLibraryA
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 758B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ