Static task
static1
Behavioral task
behavioral1
Sample
2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.pdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
5b9e13be2c843fb243899317c992cbdf0bb925804a0f566b840a3cd0652c4f20
-
Size
212KB
-
MD5
a5435a54cf92264df10dcd221612f20e
-
SHA1
e34766b98ac50f692f9a63103aacf2660c942a59
-
SHA256
5b9e13be2c843fb243899317c992cbdf0bb925804a0f566b840a3cd0652c4f20
-
SHA512
d182d1fa31d03e7454617c52389c37cd694c2e54bd45596d73cf6d89eb685a5b5a7dcee076e85f559e525e3f0af0f52a14ee9a8caa3c5a41a482f923cd6e39d1
-
SSDEEP
3072:g8QgunHJ8VsY/PvNAyD7b8NhoFIDOZFn34PnnZFMY9A8ChGl8Zdi0JPY9ExCcjt9:ZunHAXZ7bYUfoP4YahGMDJsExk4wcG+
Malware Config
Signatures
Files
-
5b9e13be2c843fb243899317c992cbdf0bb925804a0f566b840a3cd0652c4f20.zip
-
2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.pdf.exe.exe windows x86
328fdcda55996419f0e7ac9a4a8ec4a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msdtcprx
DTC_XaCommit
mydocs
DllGetClassObject
msvbvm60
rtcEnvironBstr
__vbaAptOffset
__vbaObjVar
__vbaFileOpen
__vbaCyFix
__vbaI2Str
rtcInputCharCount
rtcCommandBstr
kernel32
GetProcAddress
AddAtomW
lstrcmpW
lstrlenA
VirtualAlloc
LoadLibraryA
GetVersion
GetFileAttributesW
CopyFileA
AddAtomA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ