PO 7875FRSE[.]xlsx[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 7875FRSE.xlsx.exe
Size

745KB
MD5

10a4c9d49a1e0f7ed66dd8cd1b94bf94
SHA1

54e1eb6b3e1b777e87743216e0ae23f94d901ec7
SHA256

68498ff9770059481e174c149a2c193479b556dd7ec91c1d34dd76c573ac709c
SHA512

a832147435c2274f4351d2e1bea3a1251f417a2b3652407ffb0ea3a4649992cef9ad31fe1f8e481099c5335bddeff048bb078463d63f17d4f537f6e465dabd92
SSDEEP

12288:PoAcuF6mn1DHLZnvJl2iOe42KMu/N3mWhQmwmJCMpUXa09lmr8+JyVlHcAGEteTK:KiOV/NOaMa09l08gyV1nGEteLG7OJBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 7875FRSE.xlsx.exe

Files

PO 7875FRSE.xlsx.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 725KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ