Static task
static1
Behavioral task
behavioral1
Sample
RECHNUNG99787383.exe
Resource
win7-20220812-en
General
-
Target
RECHNUNG99787383.exe
-
Size
857KB
-
MD5
ac6b0cfa28b1f13f4ca69b7a6e74c82c
-
SHA1
b77d0f43a3b2df7eb56234f477a502a3d3ce3edb
-
SHA256
c687dcb5a0a34be93b34f8a28fdd70c929aa92815480383640b4c8f79edd4e1d
-
SHA512
3725fc990caaff57ff2940e24fd34db83f7cdaf8736690cb255e9b680d8fa0c87e16e4542b1c8f182161815efeb8997fda8d9de27ad9b3430626044a4cc73946
-
SSDEEP
24576:8tnVui3djO0lJ6PieCvuNva6Llu+oDhK6P:8hVuitjDf6PgvwyZ+o4
Malware Config
Signatures
Files
-
RECHNUNG99787383.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 850KB - Virtual size: 850KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ