Static task
static1
Behavioral task
behavioral1
Sample
RV New order from wheel-tec doc 2785838240681.msg
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
RV New order from wheel-tec doc 2785838240681.msg
Resource
win10v2004-20220901-en
General
-
Target
RV New order from wheel-tec doc 2785838240681.msg
-
Size
97KB
-
MD5
b62978c193cd990502141c8756f1b3d4
-
SHA1
7e07387bba533ea7c8f80fb36d226715c936f295
-
SHA256
545c5802e82c20a863f5ea1db347b5365c68fae62360f76dc4eba89fe7745a93
-
SHA512
62ef22254627743e04b1d14176a6a69e7201a13daa1b594796f7365473d57de3ba527e72d0ba08e6fe899b5ec796cdad17c77e4e105695f8b0026b051a395340
-
SSDEEP
768:+ZrWEcIbldnezv6DIWQkNmwdZaqx7B0z6drZ3IT+XdgFRWZALP1xqkBr61Gh0liC:od5JJeL6DIWPa23ITmS1x7
Malware Config
Signatures
Files
-
RV New order from wheel-tec doc 2785838240681.msg.msg
-
http://SRV087.ain.gub.uy
-
http://ain.gub.uy
-
http://correo.ain.gub.uy
-
http://europe.com
-
https://irp-cdn.multiscreensite.com/3387bfd1/dms3rep/multi/wheeltec_pms151-rgb.png
-
https://www.facebook.com/WheelTec
-
https://www.instagram.com/wheeltecnl
-
https://www.wheel-tec.nl
-
http://wateroasis-hk.com
-
http://wheel-tec.nl
-
http://www.facebook.com/WheelTec
-
http://www.instagram.com/wheeltecnl
-
http://www.wheel-tec.nl
- Show all
-
-
PO-27858382406812003_from_wheel-tec-Nederlands.gz.rar
-
PO-27858382406812003_from_wheel-tec-Nederlands.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ