Static task
static1
Behavioral task
behavioral1
Sample
PRE ALERT (HBL, MBL and D-N)/PRE ALERT (HBL, MBL and D-N).xlsx.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
PRE ALERT (HBL, MBL and D-N)/PRE ALERT (HBL, MBL and D-N).xlsx.exe
Resource
win10v2004-20240708-en
General
-
Target
195315c7261ac88021b5c41c60311c66b7593308c54b2bc26495cb907157bdcc.zip
-
Size
704KB
-
MD5
cbe1f20f74b0f149119c5c2e398938eb
-
SHA1
28418dfc5ec19683ef210dbb95bd89b93cbf85a9
-
SHA256
195315c7261ac88021b5c41c60311c66b7593308c54b2bc26495cb907157bdcc
-
SHA512
ee96292f8a38b025ed56bf5e7c9f62f107a6c1309cec0b49e8bba4c7e20abe4c5706840edc5cf280304f29f4a37387b761fb7b09265dcf8aea817b8876e330f8
-
SSDEEP
12288:74sjkxxD0pXAn/wqnSJyAAVpFbycDz0honfZntSkQcCUCwOU4vl6XCqJ:74dxxIXA/wSaxyPycDoonfJtrQT5C4I1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PRE ALERT (HBL, MBL and D-N)/PRE ALERT (HBL, MBL and D-N).xlsx.exe
Files
-
195315c7261ac88021b5c41c60311c66b7593308c54b2bc26495cb907157bdcc.zip.zip
-
PRE ALERT (HBL, MBL and D-N)/PRE ALERT (HBL, MBL and D-N).xlsx.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 714KB - Virtual size: 714KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ