Static task
static1
Behavioral task
behavioral1
Sample
2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe
Resource
win10v2004-20220812-en
General
-
Target
3a23bfb7585033cb42847fcbd2652accf014a4f201ee60e30971ea13c52bba31
-
Size
208KB
-
MD5
4a0777d524af97513d2258aba1e4a877
-
SHA1
56217e5e5d39e6b0a4950ad32985671d08cee994
-
SHA256
3a23bfb7585033cb42847fcbd2652accf014a4f201ee60e30971ea13c52bba31
-
SHA512
a0ee0b62e146e6eba0508d3f21b9bda19c98784c0731a698ee72502c9fceef054a3d653496ac8a00303b22f095db44070a9c9baf9b4f3bab2c3da30439cfcf92
-
SSDEEP
6144:CqUI3+FsSE5a+pmDS39l1Ybfm9gF+Kl2jUjk5X:CqAqSapzsfm9C+c2jak5X
Malware Config
Signatures
Files
-
3a23bfb7585033cb42847fcbd2652accf014a4f201ee60e30971ea13c52bba31.zip
-
2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe.exe windows x86
a66b0c71dfa22a3230e7a33c53534455
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oddbse32
ConfigDSNW
acledit
EditPermissionInfo
SedDiscretionaryAclEditor
kernel32
LoadLibraryA
GetLocalTime
GetFileAttributesA
GetModuleHandleW
VirtualAlloc
CreateSemaphoreA
GetCommandLineW
mgmtapi
SnmpMgrCtl
SnmpMgrClose
SnmpMgrGetTrap
SnmpMgrGetTrapEx
SnmpMgrOpen
SnmpMgrRequest
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ