b840d366cceb8f38b387b330b3b9ac5e8bb1f84d686186296cecefea0cdbc21b | Triage

Submit
Reports

Overview

overview

7

Static

static

2014_11rec...df.exe

windows7-x64

7

2014_11rec...df.exe

windows10-2004-x64

1

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.pdf.exe

Resource

win7-20221111-en

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.pdf.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

1 signatures

150 seconds

General

Target

b840d366cceb8f38b387b330b3b9ac5e8bb1f84d686186296cecefea0cdbc21b
Size

212KB
MD5

23500198d07af01f337accc44525053e
SHA1

cd4a08740ab0104206de79eaeef42865c8eca1b0
SHA256

b840d366cceb8f38b387b330b3b9ac5e8bb1f84d686186296cecefea0cdbc21b
SHA512

e1baf03b7172e981ab80a6e6ee24add312334eda3adf8d0d4824174aaf96f7e2d1e5d9277ef1cb3be0a21f511bd1c127450826c557919fa145133bb7da55ceff
SSDEEP

6144:Km/fER1d54wmGtDKP2nAjLRUCeNS9PRnLciB+fNiXwnL1NV:Km/f+dRm8CjdNanNiXi1NV

Score

N/A

Malware Config

Signatures

Files

b840d366cceb8f38b387b330b3b9ac5e8bb1f84d686186296cecefea0cdbc21b
.zip
2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.pdf.exe
.exe windows x86

d2889669d030a742750da86c0b36fb48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

rtcInputCharCount
__vbaObjSet
__vbaObjVar
rtcCommandBstr
__vbaI2Str
__vbaCyFix
PutMem1
Zombie_Invoke

rpcrt4

NdrNonConformantStringMemorySize
NdrMesProcEncodeDecode
RpcMgmtSetServerStackSize
tree_into_ndr
NdrFreeBuffer
NdrMesTypeEncode2
RpcNsBindingInqEntryNameW

certcli

CACertTypeGetSecurity
CAAddCACertificateType
CASetCAFlags
CAUpdateCA

kernel32

GetCurrentProcess
lstrcpynW
GetProcAddress
VirtualAlloc
AddAtomW
GetLocalTime
lstrlenA
AddAtomA
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy