Static task
static1
Behavioral task
behavioral1
Sample
2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.pdf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
65fb7625a2b1c164810a516d46cda46dc12cdbce76d989b3953ef33a5b49e0f1
-
Size
190KB
-
MD5
4cd07ec638ab10a6a9fab6206d09844f
-
SHA1
60df5632a4e43eec6ee34940ca7789bb29587498
-
SHA256
65fb7625a2b1c164810a516d46cda46dc12cdbce76d989b3953ef33a5b49e0f1
-
SHA512
7ddcbf69c9f645a065d5dc6e4cf63de6f6b87dddeb8ccdc4734f50868708c60e8c99dd44dd0ad84be1eb77ede337fbf416ab9fa84486d13cbf86e8c7d365c7c0
-
SSDEEP
3072:TXVEAKbL7dUjQYBm+wuIc2dl9BfN0rET0oLZIfCpYHLbQOCoowhxQI/kl98LORZA:TRKn7dULBm+FGFBF0wLUZH37OCCKEZYp
Malware Config
Signatures
Files
-
65fb7625a2b1c164810a516d46cda46dc12cdbce76d989b3953ef33a5b49e0f1.zip
-
2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.pdf.exe.exe windows x86
1e91082bb191fb3ac662b0f3054dcddb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfW
GetSysColor
GetMenuItemCount
CheckMenuRadioItem
GetClientRect
GetWindowLongA
UpdatePerUserSystemParameters
SetWindowLongW
FindWindowW
InsertMenuW
SwapMouseButton
LoadAcceleratorsA
dsauth
StoreEndSearch
DhcpDsGetAttribs
DhcpDsSetLists
DhcpDsInitDS
StoreCleanupHandle
DhcpDeleteServerDS
StoreSearchGetNext
kernel32
GetCommandLineW
GetCompressedFileSizeA
GetTickCount
UTUnRegister
GetOverlappedResult
GetLargestConsoleWindowSize
VirtualAlloc
lstrlenW
OpenEventA
GetTapeStatus
GetCurrentProcessId
LoadLibraryA
DeleteVolumeMountPointW
GetCurrentThread
CloseHandle
FindFirstChangeNotificationA
GetProcAddress
ReadFile
GetVersion
CreateFileA
WideCharToMultiByte
LockResource
GetVersionExA
DosDateTimeToFileTime
lstrcpynW
GetStartupInfoW
SetConsoleDisplayMode
LoadLibraryExW
LocalUnlock
TerminateThread
OpenMutexW
netplwiz
DllCanUnloadNow
ClearAutoLogon
NetAccessWizard
DllGetClassObject
NetPlacesWizardDoModal
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ