uLk[.]xls | Triage

Sharing

Copy URL Twitter E-mail

General

Target

uLk.xls
Size

64KB
MD5

b92fafc6888c0a32351bd164f9730475
SHA1

4316984b471477311dd97be8a633fd744d598e56
SHA256

c98da320ceaaabe5f1e42903caebfec18aba1715083f1c775df678ca8fbaef55
SHA512

2e7523729e10902cab912ba93c4d3a4aac4a6b34243493da2096952a75abd3ccc04c4ad184b0f4ee4ce5b7619d388b4890d665513f110a4dc950571eb7595191
SSDEEP

1536:8BAkONEbEcsg5iexKeXgX5ScJYNodyZLcj0:Cp5iexKMgX5ZJ3AJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
uLk.xls

Files

uLk.xls
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ClassLibrary2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ