b9c0b8f4be2f4525870c76510cf10b6775fdbf6f37449582a97ffaf169cfa8de

Sharing

Copy URL Twitter E-mail

General

Target
b9c0b8f4be2f4525870c76510cf10b6775fdbf6f37449582a97ffaf169cfa8de
Size 120KB
Sample221124-ffl4xsab77
SHA256 b9c0b8f4be2f4525870c76510cf10b6775fdbf6f37449582a97ffaf169cfa8de
MD5 7b4c591ae1358eaccc400e9e4bd41786
SHA1 64522739f737e0aadccfe7381a613921d8e9f464
SHA512 b81cbd7774f965d35c1ce80aa7d08c3dc41dd84970fb055ee96cc1a671f310174f648054cd7ff8857de773dff41e09a2ae5b5d43d53c22dc405fefeede7b2b35
SSDEEP 3072:u3rHcScFVvUB2rmy4uEZ08nc5UrUJLiWJKJf5CmJD:czohe2rmy4uEjnZUJmt8e
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b9c0b8f4be2f4525870c76510cf10b6775fdbf6f37449582a97ffaf169cfa8de

.zip 120KB
rechnung_11_2014_3280000236_telekom_de_002839300002_11_0000352899_000005.exe

.exe 148KB

b9c0b8f4be2f4525870c76510cf10b6775fdbf6f37449582a97ffaf169cfa8de

SHA256 b9c0b8f4be2f4525870c76510cf10b6775fdbf6f37449582a97ffaf169cfa8de
MD5 7b4c591ae1358eaccc400e9e4bd41786
SHA1 64522739f737e0aadccfe7381a613921d8e9f464
SHA512 b81cbd7774f965d35c1ce80aa7d08c3dc41dd84970fb055ee96cc1a671f310174f648054cd7ff8857de773dff41e09a2ae5b5d43d53c22dc405fefeede7b2b35
SSDEEP 3072:u3rHcScFVvUB2rmy4uEZ08nc5UrUJLiWJKJf5CmJD:czohe2rmy4uEjnZUJmt8e
MD5 SHA1 SHA512 SSDEEP

rechnung_11_2014_3280000236_telekom_de_002839300002_11_0000352899_000005.exe

IMPHASH 35457525f591a31b5b65eb12e30271e5
SHA256 b673c683d1ae36a0c6401adda9d23e05468fe2a5067ad4d785b39c0aed4f125e
MD5 85361cc6dd212579eb0c5974a7ab0faf
SHA1 8a9d5e8cd1f75b48b4113955b55849bc10a9eb14
SHA512 593af436b85f2a2540b143c79a93211e499bec7de583cbdfa46fd5f432fa52c1f0ed99dc18e6eb654622bedeb1a0b3decb77b3ad09f46bc9c687117dec0dae3a
SSDEEP 1536:+fr+0Z9MV6eBqDDo2d7M6RO5UrU5mOLiWJ1L6RtJvfyGYkk/8H8LnSH0yxWuf:VYLeS08nc5UrUPLiWJKJf548HkSUyMuf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

10810

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42u

ord2717 ord4074 ord4692 ord5303 ord5285 ord5710 ord2977 ord3142 ord3254 ord4459 ord3131 ord3257 ord2980 ord3076 ord2971 ord3825 ord3826 ord3820 ord3074 ord4075 ord4616 ord4418 ord3733 ord561 ord825 ord815 ord641 ord609 ord800 ord2506 ord2613 ord1131 ord665 ord1971 ord3313 ord5180 ord354 ord5261 ord4370 ord4847 ord4992 ord6048 ord1767 ord4401 ord5276 ord4419 ord3592 ord2567 ord6051 ord5298 ord1768 ord4390 ord5237 ord2377 ord5157 ord6370 ord4347 ord5286 ord3793 ord4831 ord4435 ord2640 ord2047 ord6372 ord3744 ord5059 ord1720 ord5257 ord2438 ord2116 ord5273 ord3397 ord4621 ord3569 ord1143 ord1165 ord861 ord540 ord567 ord324 ord2362 ord2294 ord4229 ord4704 ord3658 ord3621 ord755 ord2406 ord4128 ord4292 ord2705 ord5783 ord5784 ord283 ord472 ord470 ord823 ord6330 ord2371 ord5296 ord3341 ord2388 ord5193 ord1089 ord3917 ord5727 ord2504 ord2546 ord4480 ord6371 ord4269 ord4073 ord4667 ord1569

msvcrt

__set_app_type _except_handler3 __dllonexit _onexit _controlfp __p__commode _adjust_fdiv __setusermatherr _initterm __wgetmainargs _wcmdln exit _XcptFilter _exit srand __CxxFrameHandler __p__fmode _wfopen rand _gcvt

kernel32

CreateProcessW GetACP GetStartupInfoW ExitProcess GetTickCount GetModuleHandleW IsDBCSLeadByteEx OpenProcess GetCurrentProcessId

user32

KillTimer ScreenToClient GetCursorPos InvalidateRect SetTimer GetSystemMetrics GetClientRect DrawIcon LoadIconW EnableWindow IsIconic SendMessageW

gdi32

GetTextMetricsA Ellipse SetPaletteEntries

psapi

GetModuleFileNameExW