5f69270dbd1121439d528d9078f0afb0344b3e2d2d9e72f78a0c84a600eb291b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f69270dbd1121439d528d9078f0afb0344b3e2d2d9e72f78a0c84a600eb291b
Size

268KB
MD5

793006c978aa0d25c29e272f0cd5599e
SHA1

9afd52c64a5ed7559a38be603bca8c852d12b735
SHA256

5f69270dbd1121439d528d9078f0afb0344b3e2d2d9e72f78a0c84a600eb291b
SHA512

9783c171af209baa03b71793efd7aa775c88cb2176f33fb88ccd1c35539d5fffad0190fd6ac4ae78ce603c341e5dce14283eccc65e50a53f8947bebf99540096
SSDEEP

6144:Mh+D9JaQMyu0B9SLmEJs02Zj67ztbXBGZwmdwZhcZB0ftwD:Mh+JJ1M96SXJ46FbXBGZ/wZqqtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OOLU8810214280/OOLU8810214280.xlsx.exe

Files

5f69270dbd1121439d528d9078f0afb0344b3e2d2d9e72f78a0c84a600eb291b
.zip
OOLU8810214280/OOLU8810214280.xlsx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 357KB - Virtual size: 357KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ