78df1aaac39a80ea1628f64e94436a84eb98ca891ccc37763c28d6ecf02d5443

Sharing

Copy URL Twitter E-mail

General

Target

78df1aaac39a80ea1628f64e94436a84eb98ca891ccc37763c28d6ecf02d5443
Size

192KB
MD5

23d352f805cfadc4dbb00f36422f9320
SHA1

f92f716d5aee901574028d62c3928064483de7fd
SHA256

78df1aaac39a80ea1628f64e94436a84eb98ca891ccc37763c28d6ecf02d5443
SHA512

bea8e83ddd4afc0e0e9d97a3142f31b58f4fb8938608d811cf10ae5bfdc739a8f3636f5da3ebe192eadc1978cc66d0de82c11ea936c003df238add4076238305
SSDEEP

3072:zPSFBLs4aQIZJ4hOgPv0XRZ55z+60uG3bMnPEA6WKNSK/5QBbuZsaN:2TszG6DW60uGrwPEA6WO/5QBbueA

Score

N/A

Malware Config

Signatures

Files

78df1aaac39a80ea1628f64e94436a84eb98ca891ccc37763c28d6ecf02d5443
.zip
2014_11rechnung_4768955881_pdf_sign_telekom_de_deutschland_gmbh.exe
.exe windows x86

536f1816544e236bc0b64ba87064451c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControls
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_GetBkColor
LBItemFromPt
ImageList_Draw
ImageList_GetImageCount

kernel32

lstrlenW
GetFileType
GetCurrentProcessId
LocalAlloc
GetVersionExA
lstrcpynW
GetTickCount
GetProcAddress
VirtualAlloc
LoadLibraryA
GetCommandLineW
GetStartupInfoW
CreateProcessW
CreateFileMappingA
CreateFileA
ReadFile
GetNumberFormatA
GetCompressedFileSizeA
GetVersion
CloseHandle
GetCurrentThread
GetLogicalDriveStringsW

dsauth

StoreDeleteObject
DhcpDsDelServer
StoreCleanupHandle
StoreEndSearch
StoreSetSearchOneLevel
DhcpDsAddServer
DhcpDsInitDS
StoreInitHandle
StoreSetSearchSubTree

netplwiz

NetPlacesWizardDoModal
DllGetClassObject
NetAccessWizard

user32

FindWindowW
SendInput
GetSysColor
GetAltTabInfoW
LoadAcceleratorsA
SetDlgItemTextW
wsprintfW
RegisterClassA
MapVirtualKeyExA
CheckMenuRadioItem
SetPropA
DdeAddData
ToAsciiEx
GetClientRect

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

536f1816544e236bc0b64ba87064451c

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

dsauth

netplwiz

user32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 184KB - Virtual size: 183KB

.data Size: 18KB - Virtual size: 18KB

.rsrc Size: 27KB - Virtual size: 26KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 184KB - Virtual size: 183KB

.data
Size: 18KB - Virtual size: 18KB

.rsrc
Size: 27KB - Virtual size: 26KB

.reloc
Size: 1KB - Virtual size: 1KB