Static task
static1
Behavioral task
behavioral1
Sample
2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.pdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
5d85f27c547b254075ce3d728c0986a0b82c0a8aec6afe66e5fd743a48258e7d
-
Size
212KB
-
MD5
a06ba1d27715478f4a0fc7461d4ee772
-
SHA1
546b0dd8dc8017948f104f31127c15b898271d3b
-
SHA256
5d85f27c547b254075ce3d728c0986a0b82c0a8aec6afe66e5fd743a48258e7d
-
SHA512
1087137cc43846ea71893f0d0cfb2606ad87f34e5074e76e0e36a7aba2025917b44c26b78c32d07b5e24462877788f203705979fdaf509b0c0c25673731e0ddb
-
SSDEEP
3072:W8QgunHJ8VsY/PvNAyD7b8NhoFIDOZFn34PnnZFMY9A8ChGl8Zdi0JPY9ExCcjtP:zunHAXZ7bYUfoP4YahGMDJsExk4wcGk
Malware Config
Signatures
Files
-
5d85f27c547b254075ce3d728c0986a0b82c0a8aec6afe66e5fd743a48258e7d.zip
-
2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.pdf.exe.exe windows x86
328fdcda55996419f0e7ac9a4a8ec4a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msdtcprx
DTC_XaCommit
mydocs
DllGetClassObject
msvbvm60
rtcEnvironBstr
__vbaAptOffset
__vbaObjVar
__vbaFileOpen
__vbaCyFix
__vbaI2Str
rtcInputCharCount
rtcCommandBstr
kernel32
GetProcAddress
AddAtomW
lstrcmpW
lstrlenA
VirtualAlloc
LoadLibraryA
GetVersion
GetFileAttributesW
CopyFileA
AddAtomA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ