Static task
static1
Behavioral task
behavioral1
Sample
Odcinek wypłaty_0.2.3.4._795.xlsx.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Odcinek wypłaty_0.2.3.4._795.xlsx.exe
Resource
win10v2004-20240412-en
General
-
Target
Odcinek wypłaty_0.2.3.4._795 xlsx.z
-
Size
599KB
-
MD5
5492e2278dea93c410abdecbdb925b16
-
SHA1
c96c5b814f479fa294daa1ad09867c38012110c8
-
SHA256
ab6503bfa184195060461e6ed381d6fcd89a822f9f4ac836fbdc0e402d1b9ca4
-
SHA512
4df35ecb8abb46a6c92ad4d0ea808932cc5eb695febe7313780a8b72a18544896bba8c5276a266f212cc4d5e6da894f839757d872e7dc3f3c363b4d8cf85f867
-
SSDEEP
12288:0lQe9a4RaVP6Znehn5IRqnRoY1lfcrlkHnUFz0b5sGECoczkv81:0Wia4RkgY5IRlSlGkHnmz0bDq81
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Odcinek wypłaty_0.2.3.4._795.xlsx.exe
Files
-
Odcinek wypłaty_0.2.3.4._795 xlsx.z.rar
-
Odcinek wypłaty_0.2.3.4._795.xlsx.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ