PO No[.] SER-RUB-0523-01-NS[.]xlsx[.]exe

General

Target
PO No. SER-RUB-0523-01-NS.xlsx.exe
Size 563KB
Sample230516-mxt97aad37
SHA256 db5a4b5c89e2984ac0be6e61a93dcd9ab7bb42d81ca6083b4388ae962ec6ea27
MD5 45950d601f097e45a0172605c0330c4e
SHA1 87efedfc68025377d2c7cbc530860c2a9b61348f
SHA512 ba6c0eafd5d4a7dda17f44b63bd1c4e07c7d0524a1aadbded1f331b104b98b799db3e111a249e22f9cc9cfa3b4da63238e59c852971a3f260d38479c134e7e14
SSDEEP 12288:j3fn7v5ObNZ6HRzjYlFJmM6WFjkpIeqVaqqm6Uj:7PDyNeBmFsbvLm6Uj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO No. SER-RUB-0523-01-NS.xlsx.exe

File Explorer

PO No. SER-RUB-0523-01-NS.xlsx.exe

.exe 563KB

PO No. SER-RUB-0523-01-NS.xlsx.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 db5a4b5c89e2984ac0be6e61a93dcd9ab7bb42d81ca6083b4388ae962ec6ea27
MD5 45950d601f097e45a0172605c0330c4e
SHA1 87efedfc68025377d2c7cbc530860c2a9b61348f
SHA512 ba6c0eafd5d4a7dda17f44b63bd1c4e07c7d0524a1aadbded1f331b104b98b799db3e111a249e22f9cc9cfa3b4da63238e59c852971a3f260d38479c134e7e14
SSDEEP 12288:j3fn7v5ObNZ6HRzjYlFJmM6WFjkpIeqVaqqm6Uj:7PDyNeBmFsbvLm6Uj
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

572374

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

PO No. SER-RUB-0523-01-NS.xlsx.exe

mscoree