REQ ONIV000140[.]XLSX[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

REQ ONIV000140.XLSX.exe
Size

645KB
MD5

9111819bbea5a62fd2a8b37d7ffd17a0
SHA1

ae3077b82eec6695bdd3eb40bcf992517ff6189b
SHA256

8826eb70de19f0bde0925ea53e0e33510e5414658ceaf5afacb6c1fb180d9745
SHA512

30d3cf8ead66c23856c35c1d050421cf36a787887033c3e75a4bcb09f8136f9329577ec3e688702dff83560153e2eaf02d2cafcebc84e8c77e0c9b2e4e15b1b5
SSDEEP

12288:uijLBJI3xIpLBrrC+k0oW0cT39Of5W/AITY8U4l0G5xr4yFLT+qog/ZgE:tjrux6rC+kMT3sfM/PY81br4yFmqo8Zx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
REQ ONIV000140.XLSX.exe

Files

REQ ONIV000140.XLSX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 635KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ