PEDIDO DE COMPRAS OC 1203 CRI234[.]xlsx[.]exe | Triage

Sharing

General

Target

PEDIDO DE COMPRAS OC 1203 CRI234.xlsx.exe
Size

615KB
MD5

934331eda0b472009322a97523b5bfdd
SHA1

0af4e8f64595d302ba3c5b277403230b73277eaa
SHA256

1466c1e6bd4b88ad92eac2240158c6516b8601fc59fc4260711c20e269ba17cb
SHA512

57ce4f3fa2eab5b3792c83e045eb7a0d820b0c6172017fd41dd12f172f64fe2046b92e8bc7a0acf29d3f7d5b5aa35a3fe5fb60749a9bb07d6656bccd78c41576
SSDEEP

12288:keq4E6mfJiLl9fWcbQkpClS+j80IlSgaFguAGszwTPXC2l93dvp1p7Cph8p:dEkD9pClC3ogaFgrRzwVdvp1pVp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PEDIDO DE COMPRAS OC 1203 CRI234.xlsx.exe

Files

PEDIDO DE COMPRAS OC 1203 CRI234.xlsx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 606KB - Virtual size: 606KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ