Product Samples Xls[.]zip | Triage

Sharing

General

Target

Product Samples Xls.zip
Size

655KB
MD5

02e5a3fa1254414f93c8173a6fbf54fb
SHA1

8792a2297a6d9430f31a0938f0646a9db3c9a950
SHA256

a1080dabf296d3fad0718120c07bae5b175e166b791e701f4ca86b10f53678e2
SHA512

67a9dc386153a72095169ff1680a57ff3baa80434b2c52e640c87800cd85b907170b8cbb4dcc92f7b4bfa0ea2b4d2855565b38bdc7ffb5adf518e2736cd74767
SSDEEP

12288:RhKLgt76axUCxtc2iq4hhp+BV6IE2/myE5LLGZSJB9mJyNg1UypqfG6FgyFhSCw:Rhz6a7fc15b8VYe1cB9mijeC1F/zw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Product Samples Xls.exe

Files

Product Samples Xls.zip
.zip
Product Samples Xls.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1013KB - Virtual size: 1013KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ