Static task
static1
Behavioral task
behavioral1
Sample
2014_11finanzgruppe_volksbanken_00002000001.3738830001.556267288-0001.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2014_11finanzgruppe_volksbanken_00002000001.3738830001.556267288-0001.exe
Resource
win10v2004-20221111-en
General
-
Target
3655206e9e2d4f481be78c41395df37ec93e909998df269a1b3d4361d8b89bea
-
Size
208KB
-
MD5
e827b44a1ed13b0cdd9445c5967c0df8
-
SHA1
3f26977c7a0cd6da8117cc05c8b052ec822127ff
-
SHA256
3655206e9e2d4f481be78c41395df37ec93e909998df269a1b3d4361d8b89bea
-
SHA512
4fc236d7bba2376903a2ef31eeaedbc4d81cdcbaef6cfd43d294fcf5b84c5ff432dd1a0c29aaf2da4271284a597887bb4d5a5b13635ec1285d58639893a242bd
-
SSDEEP
6144:aOTWvWSZhW3BG/KkGllitIcFbb0kwA9hbVCjb:a6Ch+BIGlYCcFAtA9hU/
Malware Config
Signatures
Files
-
3655206e9e2d4f481be78c41395df37ec93e909998df269a1b3d4361d8b89bea.zip
-
2014_11finanzgruppe_volksbanken_00002000001.3738830001.556267288-0001.exe.exe windows x86
648775eaa33ad6bb52030a5196bd9d93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oddbse32
ConfigDSNW
acledit
EditPermissionInfo
kernel32
GetFileAttributesW
GetModuleHandleW
VirtualAlloc
GetModuleHandleA
CopyFileA
Sections
.text Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ