Static task
static1
Behavioral task
behavioral1
Sample
2014_11informationen_finanzgruppe_000070002.000038622.771714407-0044.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2014_11informationen_finanzgruppe_000070002.000038622.771714407-0044.exe
Resource
win10v2004-20220812-en
General
-
Target
2ccc434c331d14c62f5c17d769689a20a84e12ed4c62a6915fbe5eeb7f36f49d
-
Size
209KB
-
MD5
23865f88aa89286cc4fea39f18a17730
-
SHA1
d4c7ee8e4278994a8f9afd222a830c5bd5181331
-
SHA256
2ccc434c331d14c62f5c17d769689a20a84e12ed4c62a6915fbe5eeb7f36f49d
-
SHA512
0e0ba2a4e088ee406069a109fb62ea69abde8cec7bb005be6cfea3df0a026801d49e3f6a59a1c2fb101d49284d487e9ae2ca187f5f1d0e5d8119635d56674087
-
SSDEEP
6144:43rMi5IIWE5pcSHHBe0KanR3xTxXNDFjGPKbSZhcBPv:4AqWE5nHhe+NDFjGPxZ6Bn
Malware Config
Signatures
Files
-
2ccc434c331d14c62f5c17d769689a20a84e12ed4c62a6915fbe5eeb7f36f49d.zip
-
2014_11informationen_finanzgruppe_000070002.000038622.771714407-0044.exe.exe windows x86
8f42ac020919e71042b3281f56acbacb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oddbse32
ConfigDSNW
kernel32
GetModuleHandleW
VirtualAlloc
GetFileAttributesW
lstrcmpA
LoadLibraryW
GetCurrentProcess
QueryPerformanceCounter
mgmtapi
SnmpMgrGetTrapEx
catsrv
DllRegisterServer
?ReleaseReadICR@@YGXPAPAUIComponentRecords@@@Z
DllGetClassObject
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ