Static task
static1
Behavioral task
behavioral1
Sample
2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe
Resource
win10v2004-20220812-en
General
-
Target
04a0058e480e84931c501c73ee6aff10be49dc63f0ab5f6b3c1a486930f034df
-
Size
208KB
-
MD5
158edf99eb3e0f5f1a493a6b746175c0
-
SHA1
6afbdce38cd0ac316a29c781fd793bbbb839f796
-
SHA256
04a0058e480e84931c501c73ee6aff10be49dc63f0ab5f6b3c1a486930f034df
-
SHA512
564cbfff946da2c5acb953f9bf44e893df99708ebe661f93cf4d2c560883ea39799f89d6f4e764212507f50b0df2d06bec5238e8f31e9eaff8f0bc2dca252e70
-
SSDEEP
6144:FqUI3+FsSE5a+pmDS39l1Ybfm9gF+Kl2jUjk5U:FqAqSapzsfm9C+c2jak5U
Malware Config
Signatures
Files
-
04a0058e480e84931c501c73ee6aff10be49dc63f0ab5f6b3c1a486930f034df.zip
-
2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe.exe windows x86
a66b0c71dfa22a3230e7a33c53534455
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oddbse32
ConfigDSNW
acledit
EditPermissionInfo
SedDiscretionaryAclEditor
kernel32
LoadLibraryA
GetLocalTime
GetFileAttributesA
GetModuleHandleW
VirtualAlloc
CreateSemaphoreA
GetCommandLineW
mgmtapi
SnmpMgrCtl
SnmpMgrClose
SnmpMgrGetTrap
SnmpMgrGetTrapEx
SnmpMgrOpen
SnmpMgrRequest
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ