Static task
static1
Behavioral task
behavioral1
Sample
SDC009-K-61034 xls.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SDC009-K-61034 xls.exe
Resource
win10v2004-20231215-en
General
-
Target
SDC009-K-61034 xls.exe
-
Size
17KB
-
MD5
acc3c0e146976ef24433f4e67c43464a
-
SHA1
1129b71df6c91063fb431c203224b3c911e8590b
-
SHA256
54f6314f39849f4725d6096a8622e7bd902298367119ecebf1b0d3cbc9a71085
-
SHA512
9e9f17f8bfa6def09121b3610b2a3feba9afc2033a78d8191423d9489ff263590e43042519a6ff694d718056719c1cf2b985316b0420086e331fe498eb9dad30
-
SSDEEP
384:CuBq0csxekW8SepCUnQzm7Ayu3l+6Hx4QZb77UyQAjHSUCISOEq+:Jk3HhQtWnClOn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SDC009-K-61034 xls.exe
Files
-
SDC009-K-61034 xls.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ