t:\excel\x86\ship\0\excel.pdb
Static task
static1
Behavioral task
behavioral1
Sample
MSofficeexcel2007.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
MSofficeexcel2007.exe
Resource
win10v2004-20240802-en
General
-
Target
MSofficeexcel2007.exe
-
Size
35KB
-
MD5
710cdda3bc6ff73c2399d0a718c9fbe8
-
SHA1
09b49ee08641e1d18532a67acc09d98a1b708545
-
SHA256
8caa3a2f4c39992952cd2bb38bebadbbee5fb68114500e37832221d4e59aea30
-
SHA512
2199ab7d7cff4db9101f5656151a0cdf7d7bbe8bf4b38c362608ef5261ac38c51fab267ff55ff9070becdbe24fbd2229062d74bf335f43e58fe9443363be1e4d
-
SSDEEP
768:Z15t2jF0Jb+G02G1tR98GUQXhzrNIx2TIc:Z12jFs+97KvQR6x2TIc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MSofficeexcel2007.exe
Files
-
MSofficeexcel2007.exe.exe windows:4 windows x86 arch:x86
2bed3b575b122ce7042753fe75b3b7d0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion
user32
MessageBoxA
Exports
Exports
DllGetLCID
MdCallBack
MdCallBack12
_LPenHelper
Sections
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.res Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 156B - Virtual size: 17.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE