c6593a558c0f6a658ca2876c1032a9a8ce9f41e721e7608ad2a870b19865953f

Sharing

Copy URL

Twitter E-mail

General

Target

c6593a558c0f6a658ca2876c1032a9a8ce9f41e721e7608ad2a870b19865953f
Size

134KB
MD5

a93901b94cd4a06eb2958566a08013af
SHA1

21435d512cef7379251882986914a5e0e009b523
SHA256

c6593a558c0f6a658ca2876c1032a9a8ce9f41e721e7608ad2a870b19865953f
SHA512

1af6f38a3606035cac9744cb1eac2539f89fbffdd2885c12f87b9c62fac7b177bab1e5e2e2cb2c1df457adbf39616a3ee9333b427376ea95ee302698fc3d7413
SSDEEP

3072:ohG8ouV2qjrOpIAFjGylI9sMJF99JEro9qcbi5h32:oRV7Pzq1lI9sMJFj4oLbSh32

Score

N/A

Malware Config

Signatures

Files

c6593a558c0f6a658ca2876c1032a9a8ce9f41e721e7608ad2a870b19865953f
.zip
volksbank_de_transaktions_id_000023928001_2014_11_0000390382755_00003997550002.exe
.exe windows x86

bcdc7ff93bc34eb6f3798d235d2e4142

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFile
VirtualAlloc
GlobalUnfix
WaitCommEvent
ReadConsoleW
GetConsoleInputExeNameA
GetConsoleKeyboardLayoutNameA
GetConsoleAliasExesLengthA
SetConsoleDisplayMode
lstrcpynA
Module32NextW
LocalFileTimeToFileTime
GetACP

gdi32

CreateSolidBrush
ExtSelectClipRgn
TextOutW
EqualRgn
CreateBrushIndirect
DeleteObject
HT_Get8BPPFormatPalette
GetStockObject
CreatePalette
CreatePenIndirect
SelectObject
StartPage
CreateFontIndirectA
GetClipBox
CreatePen

user32

LoadCursorA
LoadMenuW
GetDC
GetClientRect
IsChild
LoadBitmapW
FindWindowW
FindWindowA
GetMenu
LoadBitmapA
GetSystemMetrics

dmocx

DllCanUnloadNow
DllUnregisterServer
DllRegisterServer
DllGetClassObject

iasrad

?initialize@VSAFilter@@QAEJXZ
?radiusToIAS@VSAFilter@@QBEJPAUIAttributesRaw@@@Z
DllUnregisterServer
DllRegisterServer
DllGetClassObject
?shutdown@VSAFilter@@QAEJXZ
DllCanUnloadNow

wshext

DllGetClassObject
PutSignedDataMsg
IsFileSupportedName
DllCanUnloadNow
DllUnregisterServer
CreateIndirectData
VerifyIndirectData
RemoveSignedDataMsg
GetSignedDataMsg
DllRegisterServer

comctl32

InitCommonControlsEx
CreateStatusWindowW
ImageList_AddMasked
ImageList_SetFilter
ImageList_Replace
InitializeFlatSB
FlatSB_SetScrollRange
InitCommonControls
PropertySheet
ImageList_Read
ImageList_Create

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcdc7ff93bc34eb6f3798d235d2e4142

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

dmocx

iasrad

wshext

comctl32

Sections

.text Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 17KB

.CRT Size: 512B - Virtual size: 216B

.rsrc Size: 170KB - Virtual size: 169KB

.reloc Size: 1024B - Virtual size: 764B

.rdata Size: 2KB - Virtual size: 2KB

.text
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 17KB

.CRT
Size: 512B - Virtual size: 216B

.rsrc
Size: 170KB - Virtual size: 169KB

.reloc
Size: 1024B - Virtual size: 764B

.rdata
Size: 2KB - Virtual size: 2KB