BL 203948 34 xls[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BL 203948 34 xls.exe
Size

817KB
MD5

36a2ea6531d56b494966362e0a65f9d4
SHA1

e9b55f9b54625ddb03c1880c5593e6d1ec46643b
SHA256

eb36d1b0991c69be2a8008e5d99e1f902159b98bd69e2077045e2dabd04e0a87
SHA512

d6c34aa18761248c3e8032b6455d06de9b7bb8159b7dc8d4327b9715cbacb8fcd01ab3fd43b9d02e2941e779fdc7017ec537d02ca0bcdb15c0abda46899b9d0a
SSDEEP

24576:tb8vOztLHKNu+A+/1btkKG+68TYMF1MvovJPB/UEP4DGBS:ckKTnT3zMAvJJlPE

Score

1^/10

Malware Config

Signatures

Files

BL 203948 34 xls.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 651KB - Virtual size: 651KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ