PO EDM98643[.]xlsx[.]exe

General

Target
PO EDM98643.xlsx.exe
Size 580KB
Sample230515-nrpyysfa98
SHA256 5934d8422293fb25ce1de5eaa80a43ebc0113df54f7ca06e8ebdd9880d3f72d1
MD5 06671fc6a7f4306ba73750dbf458231c
SHA1 73964482afb5d43cf2a00764a374d8c1b6220da8
SHA512 869a8d528cc1c51a2bc4f9ac14d1af2522ed8183be0d5aeec0020a4315e49d252dddb4111691d3c92de31149ac2ac45b90d0a8048fc43c34f3d2c4810c998ddd
SSDEEP 12288:CsysSV17zgemg6XlszABlaxl0F67cXuB/:M17Met6XlssWxlU6ZN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO EDM98643.xlsx.exe

File Explorer

PO EDM98643.xlsx.exe

.exe 580KB

PO EDM98643.xlsx.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5934d8422293fb25ce1de5eaa80a43ebc0113df54f7ca06e8ebdd9880d3f72d1
MD5 06671fc6a7f4306ba73750dbf458231c
SHA1 73964482afb5d43cf2a00764a374d8c1b6220da8
SHA512 869a8d528cc1c51a2bc4f9ac14d1af2522ed8183be0d5aeec0020a4315e49d252dddb4111691d3c92de31149ac2ac45b90d0a8048fc43c34f3d2c4810c998ddd
SSDEEP 12288:CsysSV17zgemg6XlszABlaxl0F67cXuB/:M17Met6XlssWxlU6ZN
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

567758

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

PO EDM98643.xlsx.exe

mscoree