Static task
static1
Behavioral task
behavioral1
Sample
Purchase List Xls.exe
Resource
win7-20230831-en
General
-
Target
Purchase List Xls.exe
-
Size
1.1MB
-
MD5
cd8fc2c274368e1343bf8d74c32fa24e
-
SHA1
535ec18e4fbc9895e3941c396ede59e5d2b8925e
-
SHA256
f2090573cb87041990365a6fec8532cdc4f1cd9928a1aae37e06d0f1f8a5e9d5
-
SHA512
0a5c0a46ed84a160e670d0f1decfbde20db2f05c644fdbc0a57e229af57f10be2e4cd5f691ad2dab0dfeed0723424d4ad120e13b25043ea9a9716f712196cb9a
-
SSDEEP
24576:JCUdkXSFsDBEPaZ03lqSlwvtvl3yd2OluON4fA9uC:sUGJD6PaO1qSlstvl3yd2OluON4fA9u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Purchase List Xls.exe
Files
-
Purchase List Xls.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 855KB - Virtual size: 855KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ