Static task
static1
Behavioral task
behavioral1
Sample
PRE ALERT (HBL, MBL and D-N).xlsx.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
PRE ALERT (HBL, MBL and D-N).xlsx.exe
Resource
win10v2004-20240704-en
General
-
Target
PRE ALERT (HBL, MBL and D-N).xlsx.exe
-
Size
737KB
-
MD5
9174290f1f62ebd82a04bf6fba27d899
-
SHA1
b72a1d8a6e881965ef05e994f87e7472f85a72c3
-
SHA256
3bd4bfdf6699f873841736b733028296988e9488134b8963bf0f51980ad3d2fb
-
SHA512
2641f08bdb4dc6e151f81056d89f18734df303a0dff9e80aea36df59f84079f30bfea1e901c3ca6e66e997cda16751f31c64fa7e7060d49ba569e6654b8fd271
-
SSDEEP
12288:tpfh4qjkxlD0pXw9/wYnYJyAS/pFbscDV0No5fZdtSkgcCUCw4U4ll6rCgHKT:tpJ4DxlIXwJwYAxonscDso5fjtrgT5Ck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PRE ALERT (HBL, MBL and D-N).xlsx.exe
Files
-
PRE ALERT (HBL, MBL and D-N).xlsx.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 714KB - Virtual size: 714KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ