61198aafe1a7897968ee384fe5fc092e46915bb826019ccb3a18316df4f88025 | Triage

Sharing

General

Target

61198aafe1a7897968ee384fe5fc092e46915bb826019ccb3a18316df4f88025
Size

675KB
MD5

138fae2540d15c4d47b7c3212608a8d6
SHA1

ba64a092bfbe0d7aca493a8b96a3980345b2b627
SHA256

61198aafe1a7897968ee384fe5fc092e46915bb826019ccb3a18316df4f88025
SHA512

4d62a2077d67c4222c4d472f9e70bd5a661dc0a1d87a4ce74b2ba75c9e1f983d55701e76d0c74d79d3005fad3c3da502646bd4b7a42408806aa70bbc7a7ff8e2
SSDEEP

12288:FPQhzvfSssY5HADPN+U1iEeaPBZuIqQaH598v/3T1E/W8aiKQXZikXz/PBtYVEKz:FP3i5HArN+UzBuIx/3pEJKQXZiOxCXFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Teklif 99373998749-7638378939.xlsx.exe

Files

61198aafe1a7897968ee384fe5fc092e46915bb826019ccb3a18316df4f88025
.rar
Teklif 99373998749-7638378939.xlsx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dQgU.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 769KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ