New CSID 270883[.]xlsl[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New CSID 270883.xlsl.exe
Size

740KB
MD5

9dc91f429f705994899c2a61239083f1
SHA1

556a695113a08058782333ea173a3ba11229e33d
SHA256

21159c7fdcd672de71846a5afa9a3c514ed7fc77da385d7a97eb5c25a9400cca
SHA512

3260d9814e59f50e06896f3408845b6c7ce17c91f2caf77e413ed73c1bcedd06680c77667db6ffddc4bc722afe510d31497fc755f5859ff4b75ae32568b168e9
SSDEEP

12288:pRNGXvGe4BpN6PpK6nW+zI86a5wYJVX+zA8WCDsMVBAV4mf:UXeTpN6hZnDXwYTX+BVBAB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New CSID 270883.xlsl.exe

Files

New CSID 270883.xlsl.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ