Static task
static1
Behavioral task
behavioral1
Sample
Ausgleich 11.08.2015 - Rechnungsstelle GiroPay24 GmbH.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Ausgleich 11.08.2015 - Rechnungsstelle GiroPay24 GmbH.exe
Resource
win10v2004-20220812-en
General
-
Target
4618f71465ca0922c0ab2defedacdb58f94f25219fa33cc5137a1156142941d0
-
Size
75KB
-
MD5
611d02fbd662a43b43bfbd54e69354e6
-
SHA1
d054f194c46eeb21536e0b5183d7e6adafb76c4e
-
SHA256
4618f71465ca0922c0ab2defedacdb58f94f25219fa33cc5137a1156142941d0
-
SHA512
49700d6ba523b135139a17070ddae5b5f637c5bab7c59d53ce9e96453038b72a8bc5f87d00bb4a5d3d72402a5c8a6f0d2bda02ffcd03219cdf36d60efea27e1a
-
SSDEEP
1536:mazeH2GSNE8jDsfbAO+4a0tFxfzC6Tsg1occZ3a2+mvsMKL0h1a9yh651Vvt:m9dssfX+41tFxfvsmo73zQohiyYzVF
Malware Config
Signatures
Files
-
4618f71465ca0922c0ab2defedacdb58f94f25219fa33cc5137a1156142941d0.zip
-
Ausgleich 11.08.2015 - Rechnungsstelle GiroPay24 GmbH.com.exe windows x86
f6a5aab73107666add4452fd9bc2efde
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetFocus
EndDialog
CreateDesktopA
LoadCursorA
OemToCharA
DrawStateW
CreateWindowExW
PostMessageA
InsertMenuA
EnumDesktopsA
GetCursorPos
EnumWindows
LoadImageA
DefDlgProcW
LoadBitmapW
odbctrac
TraceSQLError
TraceSQLConnect
TraceSQLBindCol
TraceSQLFetch
TraceSQLCancel
kernel32
SetErrorMode
CreateDirectoryW
GetShortPathNameA
GetDateFormatA
ReadConsoleW
GetCommandLineW
GetProcAddress
ReplaceFileW
GetCurrentProcess
CreateSemaphoreA
GetModuleHandleA
GetACP
lstrcpyA
CompareStringW
InitializeCriticalSection
GetLocaleInfoW
WaitForSingleObject
CreateEventA
DeleteFileA
dhcpcsvc
DhcpEnumClasses
McastGenUID
McastApiCleanup
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ