Static task
static1
Behavioral task
behavioral1
Sample
informationen_zum_transaktions_02JS_2820_JWIOU_29MQ_2001_KA21.pdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
informationen_zum_transaktions_02JS_2820_JWIOU_29MQ_2001_KA21.pdf.exe
Resource
win10v2004-20220901-en
General
-
Target
2b0e54e4bb5f74d9d827c15a728ff1617889232352e9686dc8d477a4c37f2756
-
Size
212KB
-
MD5
cec63a61153ee1689ce3941d677952d5
-
SHA1
4359ce4aaae156b1eea4369308a93ee0b610ad6d
-
SHA256
2b0e54e4bb5f74d9d827c15a728ff1617889232352e9686dc8d477a4c37f2756
-
SHA512
e9930818bf744b20aa043c47a471fddcd9e0e62914cdd07d1fcc77e6177fed341187f6fec5f0333455b1e333568aa65e14e28ca149e8849b6158ee6cd56bc503
-
SSDEEP
3072:18QgunHJ8VsY/PvNAyD7b8NhoFIDOZFn34PnnZFMY9A8ChGl8Zdi0JPY9ExCcjtw:qunHAXZ7bYUfoP4YahGMDJsExk4wcG9
Malware Config
Signatures
Files
-
2b0e54e4bb5f74d9d827c15a728ff1617889232352e9686dc8d477a4c37f2756.zip
-
informationen_zum_transaktions_02JS_2820_JWIOU_29MQ_2001_KA21.pdf.exe.exe windows x86
328fdcda55996419f0e7ac9a4a8ec4a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msdtcprx
DTC_XaCommit
mydocs
DllGetClassObject
msvbvm60
rtcEnvironBstr
__vbaAptOffset
__vbaObjVar
__vbaFileOpen
__vbaCyFix
__vbaI2Str
rtcInputCharCount
rtcCommandBstr
kernel32
GetProcAddress
AddAtomW
lstrcmpW
lstrlenA
VirtualAlloc
LoadLibraryA
GetVersion
GetFileAttributesW
CopyFileA
AddAtomA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ