OrfoSpellCheck[.]zip

resource
unpack001/Release/OrfoExcelAddin.dll

OrfoSpellCheck.zip

SHA256 7faec44b150daebb5301912ca6dee4b63e6d0d934ea60f7dd3bd4f77a33a722f
MD5 b0a56007aba875a326bbe2af799032c8
SHA1 d9a5ead734946a749460930729a92c12b93d0b42
SHA512 61a1e3bb5e14e53d29c03d4560896a4e0b0ee090239a42aae687413045426c0a7e943ba354b80cacc08773177673afc97d19b478bfddb3d899105d53ec2f0a0d
SSDEEP 384:rWY8riZVxaJg7c3tWKY8gGckcJiCgD3cUUo0:rW/riBaKcgKrckcICgDnUx
TLSH
T10782BFF2C691BC03D6AA15F659980FB3962EEA2C98C8257B9C455570B2F3C84C2931C7
MD5 SHA1 SHA512 SSDEEP TLSH

Release/OrfoExcelAddin.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b19bb6ea170d071d3bda06cf49127747c7aab5e95623d39d2559c02e2ae381ea
MD5 3c663eeebd39ffc327f7fb34a98b35fa
SHA1 4557eb7b0f76e67e314c858b76e40db855643c8c
SHA512 a031591c2bdae101f503267d3ba3447afac1d75a420650cb7e7156d868b0ba16aa84100695cf0b03eedc41b809a2dc14104adf05de3aa310d3b1935d5380f6ff
SSDEEP 192:gB2MJeB6a4UTHW7yRGN7Io2kjnck3ZPfCVWCmKOXhyP1vhh3yn1o5v:gMMMB60QyRGxL7ck3ZDXsvhiGv
TLSH
T1E3522A16B3F48333C96B0B363D51A2A10777A741DB13EB5E9D8A80AB489B7880253F57
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\MyWORK\VS_X_PROJECT\OrfoExcelAddin\OrfoExcelAddin\obj\Release\OrfoExcelAddin.pdb

Release/OrfoExcelAddin.dll.manifest

SHA256 a215a794c300092e34ea4f57876630f4401b0dd2b1987a0b5d64272da2072f77
MD5 45723eb4b0112684185cc530efacd72a
SHA1 aebfd8808d7965def5d46b714c6252ff6e3e6151
SHA512 6d084d4b384729416e604895f3017998b45f68e92abcea03a2729daef6dae25f40d7447e9371328040e7a68588fcbab089cc92caffa6353a9fb81e470e0c5f30
SSDEEP 192:oM7rYcAexZvwa228ztahf5fSjN+XY/FhmA:B7rYcAe3vC25cNkkv
TLSH
T1C732E706C4C8F9B1073751E17DE3E912DBAE5363818E0486F56CAA8F9F1D9D58683273
MD5 SHA1 SHA512 SSDEEP TLSH

Release/OrfoExcelAddin.pdb

SHA256 8097072306cb5d984d383ec4adc4351bb32e0f9521d6e5bbb8a3f03de93a3317
MD5 4397a82ddbcfd6f12e90969b02b42403
SHA1 21f5fb038801a09c9963443fcfe8f8f0273793ef
SHA512 cc723260c92a706dc978be5a156ca0a0b51b0eea3d004c3d7e7875f309892ec6092ed7a7c6db8e0ff12ebc759e3e7e1884155cb2137529e0bf716c735d65b167
SSDEEP 384:UaoTRLPKoQr3tNXMKz+MTIJjmgFZPMzXr3Y:UaWLhQr3ll0xFE8
TLSH
T1EAE23E57FB80C933C41AD5B496AF5F1E9278EC844B82974B2389F0793CB338D2E55681
MD5 SHA1 SHA512 SSDEEP TLSH

Release/OrfoExcelAddin.vsto

SHA256 d7d85b86e204303bbae664ae6d55e2ac13154dbd7965fdedbae9adbd14fbcb13
MD5 37e1e8f3508ead590ea0eeb48c0652d6
SHA1 32b853f9f0db67fa1358df317923e889e159b8bb
SHA512 f99ffa3006a8719fcf52f53f7a466c3fcf8227fb797cd847a9ed354274017245a20d31a3ce8ebdacd9f204b8029f824bdc7d91e7343a5eb1956d668f023bedc0
SSDEEP 96:xWtZcb1jOpqf2SkVRMYmONjxTpaYElZuYSY/FhmVBDA:oXQmVRMWZKAXY/FhmA
TLSH
T145B1A79DC9CCE441D305EA71B5E2D5436A9A27B340EC8049FEA95D8F5F0A9E4C1423BB
MD5 SHA1 SHA512 SSDEEP TLSH

OrfoSpellCheck.zip

Release/OrfoExcelAddin.dll

mscoree

dotnet

Release/OrfoExcelAddin.dll.manifest

Release/OrfoExcelAddin.pdb

Release/OrfoExcelAddin.vsto

Sharing

General

Malware Config

Signatures

File Explorer

OrfoSpellCheck.zip

Release/OrfoExcelAddin.dll

mscoree

dotnet

Release/OrfoExcelAddin.dll.manifest

Release/OrfoExcelAddin.pdb

Release/OrfoExcelAddin.vsto