Static task
static1
Behavioral task
behavioral1
Sample
TEKLFSTE-TUSATRKHAVACILIKUZAYSANAY_xlsx.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
TEKLFSTE-TUSATRKHAVACILIKUZAYSANAY_xlsx.exe
Resource
win10v2004-20241007-en
General
-
Target
TEKLFSTE-TUSATRKHAVACILIKUZAYSANAY_xlsx.exe
-
Size
624KB
-
MD5
037b9dc9d5bee07e111173cbe87624b4
-
SHA1
881d8ba41c222c0ff9ee96dab3e954417da6c34f
-
SHA256
3f9ac29a06c3a7145971c352ecc386b94dc13be8b479d09c920f36e20f6b1b41
-
SHA512
5fc5c3794ff87db5d13e2b93c5805f4b17c23aff7d4f348a7634206f88d3814f479d9a73a157e8f01823facf5e70dea831a8725d45171b5e1164397ce2a08433
-
SSDEEP
12288:OPbTRt0NTO1JKbMDrZrVW+RLV//TSrSv9GDa0YN7vuAwmqG8kL:ybTniTOHmWr5Uq+rSoEduAwmNx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TEKLFSTE-TUSATRKHAVACILIKUZAYSANAY_xlsx.exe
Files
-
TEKLFSTE-TUSATRKHAVACILIKUZAYSANAY_xlsx.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 611KB - Virtual size: 610KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ