Excel Document 2502023PPT[.]exe | Triage

Sharing

General

Target

Excel Document 2502023PPT.exe
Size

1005KB
MD5

cd6986320095718284f6723fa482fd2b
SHA1

2f4f4538d6777122302a6226db824523e1a7b4b7
SHA256

cd3f84c42ebdd57e9b3679216ef581b466aa1a646728156155a41055b070e788
SHA512

cca829885938d4cf962acecb6cede16af5b3ccdb3d107a42bdc6dbc8b76699100486cac5ebdbc67549af2f3e233a5c51d2d436c86e548c6d0cb600e7de8fe60c
SSDEEP

24576:xTmIt9BEP8tylbNMcVrlBM9NVROoFpCndORoybDkWOh8Pdj:xTbBe8tylNbMjVR5piKoSD/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Excel Document 2502023PPT.exe

Files

Excel Document 2502023PPT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ