General

Malware Config

Signatures

Files

• 11923fd691b9d37c78e4f6e4896ec0fc9e95de515641ff2b18be324c34cf18b4

  .zip
• de_0000239029_rechnung_scan_hp_28_0000000904_page_2_10_01_05_id_00291002098.exe

  .exe windows x86

  444d53b124188449ac1fd408739c44a4

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mfc42u

  ord4073

  ord1768

  ord4401

  ord5237

  ord2377

  ord5157

  ord6370

  ord4347

  ord5286

  ord3793

  ord4831

  ord4435

  ord2640

  ord2047

  ord6372

  ord3744

  ord5059

  ord1720

  ord2438

  ord2116

  ord5273

  ord2977

  ord3142

  ord3254

  ord4459

  ord3131

  ord3257

  ord2980

  ord3076

  ord2971

  ord3825

  ord3826

  ord3820

  ord3074

  ord4075

  ord4621

  ord4418

  ord3737

  ord640

  ord818

  ord1081

  ord323

  ord715

  ord567

  ord415

  ord5593

  ord4270

  ord1230

  ord5257

  ord755

  ord470

  ord613

  ord289

  ord540

  ord5871

  ord800

  ord537

  ord6166

  ord5601

  ord2745

  ord6451

  ord6195

  ord925

  ord4155

  ord823

  ord1172

  ord1633

  ord5781

  ord2371

  ord665

  ord1971

  ord3313

  ord6051

  ord354

  ord1834

  ord4237

  ord2715

  ord2382

  ord3054

  ord5094

  ord5097

  ord4461

  ord4298

  ord3345

  ord5006

  ord975

  ord5468

  ord3398

  ord2874

  ord2873

  ord4146

  ord4072

  ord5233

  ord5278

  ord2641

  ord1658

  ord4430

  ord674

  ord366

  ord4451

  ord5248

  ord5977

  ord4421

  ord4269

  ord6371

  ord4480

  ord2546

  ord2504

  ord5727

  ord3917

  ord1089

  ord5193

  ord2388

  ord3341

  ord5296

  ord5298

  ord2717

  ord4074

  ord4692

  ord5303

  ord5285

  ord5710

  ord4616

  ord3733

  ord561

  ord815

  ord6211

  ord6113

  ord2613

  ord5261

  ord4370

  ord4847

  ord4992

  ord4704

  ord2506

  ord6048

  ord1767

  ord5276

  ord4419

  ord3592

  ord324

  ord641

  ord4229

  ord1569

  ord1143

  ord1634

  ord2406

  ord3621

  ord3566

  ord825

  ord2400

  ord2088

  ord3658

  ord686

  ord5180

  ord384

  ord1165

  msvcrt

  __p__commode

  __p__fmode

  __set_app_type

  _except_handler3

  __dllonexit

  _onexit

  ?terminate@@YAXXZ

  _controlfp

  __setusermatherr

  _initterm

  __wgetmainargs

  _wcmdln

  _XcptFilter

  __CxxFrameHandler

  srand

  _adjust_fdiv

  time

  rand

  malloc

  _purecall

  exit

  _exit

  kernel32

  GetStartupInfoW

  GetModuleHandleW

  GetModuleFileNameW

  CreateFileW

  user32

  UpdateWindow

  CopyRect

  GetSystemMetrics

  EnableWindow

  KillTimer

  SetTimer

  LoadCursorW

  LoadBitmapW

  IntersectRect

  gdi32

  CreateCompatibleBitmap

  CreateCompatibleDC

  BitBlt

  comctl32

  ImageList_Draw

  ImageList_AddMasked

  Sections

  .text

  Size: 20KB - Virtual size: 17KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 176KB - Virtual size: 174KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ