No[.] NS2ANNA REV1[.]xlsx[.]exe | Triage

Sharing

General

Target

No. NS2ANNA REV1.xlsx.exe
Size

662KB
MD5

6c60453fe8d8d14510d88a2aa9deb625
SHA1

afeb0c67c08e425c2786be2a86d1039dcabc227a
SHA256

103defe5089465f983ce4e96852a172e6f3e3ae5edac58d366df916f0a189cb7
SHA512

00cf6b6bcc3107775f2d1477b97079023302665d72696fa1e97e1564c95e42031b8e6e3d81c3d69b8aa652fa9eb5a93680cdec9a6fc3f4e8a1665975f08bc1c3
SSDEEP

12288:BSAMTihh6xhZ6Or4zMjh3cIXlnYF1X5x1IOQakJxn4Wk3gmP75HPuP:bMUgh8y4wjhAF5ucx1gmP7pG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
No. NS2ANNA REV1.xlsx.exe

Files

No. NS2ANNA REV1.xlsx.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 655KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ