Static task
static1
Behavioral task
behavioral1
Sample
2014_11rechnung_4768955881_pdf_sign_telekom_de_deutschland_gmbh.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2014_11rechnung_4768955881_pdf_sign_telekom_de_deutschland_gmbh.exe
Resource
win10v2004-20220812-en
General
-
Target
2ae8a30f43d55460eebcbdb34803b28d844ec896d076ad1fd4cf974db7cd37c4
-
Size
190KB
-
MD5
a0e8e23af7c949ac60747bf34f55b480
-
SHA1
71c5485304d597c0769a6899d8424dd810e1368b
-
SHA256
2ae8a30f43d55460eebcbdb34803b28d844ec896d076ad1fd4cf974db7cd37c4
-
SHA512
da7f682e339924f7570444b71fb7d2eafd2c297b4f71cac7e75cd8d9a797bc44b9260cb9bbd9f83bd39e13f77696ac4cef473207d4f46da74c3be0567339bd4f
-
SSDEEP
3072:OXVEAKbL7dUjQYBm+wuIc2dl9BfN0rET0oLZIfCpYHLbQOCoowhxQI/kl98LORZN:ORKn7dULBm+FGFBF0wLUZH37OCCKEZYi
Malware Config
Signatures
Files
-
2ae8a30f43d55460eebcbdb34803b28d844ec896d076ad1fd4cf974db7cd37c4.zip
-
2014_11rechnung_4768955881_pdf_sign_telekom_de_deutschland_gmbh.exe.exe windows x86
1e91082bb191fb3ac662b0f3054dcddb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfW
GetSysColor
GetMenuItemCount
CheckMenuRadioItem
GetClientRect
GetWindowLongA
UpdatePerUserSystemParameters
SetWindowLongW
FindWindowW
InsertMenuW
SwapMouseButton
LoadAcceleratorsA
dsauth
StoreEndSearch
DhcpDsGetAttribs
DhcpDsSetLists
DhcpDsInitDS
StoreCleanupHandle
DhcpDeleteServerDS
StoreSearchGetNext
kernel32
GetCommandLineW
GetCompressedFileSizeA
GetTickCount
UTUnRegister
GetOverlappedResult
GetLargestConsoleWindowSize
VirtualAlloc
lstrlenW
OpenEventA
GetTapeStatus
GetCurrentProcessId
LoadLibraryA
DeleteVolumeMountPointW
GetCurrentThread
CloseHandle
FindFirstChangeNotificationA
GetProcAddress
ReadFile
GetVersion
CreateFileA
WideCharToMultiByte
LockResource
GetVersionExA
DosDateTimeToFileTime
lstrcpynW
GetStartupInfoW
SetConsoleDisplayMode
LoadLibraryExW
LocalUnlock
TerminateThread
OpenMutexW
netplwiz
DllCanUnloadNow
ClearAutoLogon
NetAccessWizard
DllGetClassObject
NetPlacesWizardDoModal
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ