Static task
static1
Behavioral task
behavioral1
Sample
rechnung_11_2014_vodafone_team_00200034994_00003999300067_11_0000002738.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
rechnung_11_2014_vodafone_team_00200034994_00003999300067_11_0000002738.exe
Resource
win10v2004-20220812-en
General
-
Target
a78168a7490f4eae97b521ecfdbe52e133c88f41a55813730630a36c2908b3cd
-
Size
131KB
-
MD5
3a0216c25eef14dae185773fbfde39ea
-
SHA1
3a6def70fdba537d02a4495fcb0df0f84a6404bf
-
SHA256
a78168a7490f4eae97b521ecfdbe52e133c88f41a55813730630a36c2908b3cd
-
SHA512
a0c0ff8ee71e3196d61b233fc89c0684bc7eb6861a3151fb57bb3e0eb1c197de3b72fcf9d502ef267e73125c52d46c271eecc1ff44090af14a3d1139b554bc53
-
SSDEEP
3072:dA6gUofzsi96Up164tnYl82gGtIVcrpJkYgV:a6gN8K8iCIGtOcrLkF
Malware Config
Signatures
Files
-
a78168a7490f4eae97b521ecfdbe52e133c88f41a55813730630a36c2908b3cd.zip
-
rechnung_11_2014_vodafone_team_00200034994_00003999300067_11_0000002738.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ