xlAutoOpen
Static task
static1
Behavioral task
behavioral1
Sample
58b9c3875b2fafaa35de0274096e8d9a6367cc4be83e19f72cb825124ec86c5d.xll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
58b9c3875b2fafaa35de0274096e8d9a6367cc4be83e19f72cb825124ec86c5d.xll
Resource
win10v2004-20240419-en
General
-
Target
58b9c3875b2fafaa35de0274096e8d9a6367cc4be83e19f72cb825124ec86c5d.xll
-
Size
3KB
-
MD5
590b106f3fd63be54da9e830adfd44d1
-
SHA1
10921cf2ebb7813b6bfba0d4ff0c49eb9a596682
-
SHA256
58b9c3875b2fafaa35de0274096e8d9a6367cc4be83e19f72cb825124ec86c5d
-
SHA512
9cf170e0ab61ba0002fe1aec00b19406e1e9902f50e571bd1cc4f215c626f8321e3b1d82a19db35a1ea3c6c38dc7b18edd2707712f4753ed23c8f299e211273d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58b9c3875b2fafaa35de0274096e8d9a6367cc4be83e19f72cb825124ec86c5d.xll
Files
-
58b9c3875b2fafaa35de0274096e8d9a6367cc4be83e19f72cb825124ec86c5d.xll.xll windows:1 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 66B
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ