Static task
static1
Behavioral task
behavioral1
Sample
Kaufvertrag - Mahnkosten vom 22.02.2013 .exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Kaufvertrag - Mahnkosten vom 22.02.2013 .exe
Resource
win10v2004-20221111-en
General
-
Target
c5b15b9ce8e1d849ee6a89543f77e1143ce300b4818cbbdbd47b1f90d15e003f
-
Size
21KB
-
MD5
9d67a3d2714f41f3260194b393dd56f7
-
SHA1
0f151f327b652106d7a13e85fd200e2b8a3954be
-
SHA256
c5b15b9ce8e1d849ee6a89543f77e1143ce300b4818cbbdbd47b1f90d15e003f
-
SHA512
6ef18ccbc8ee7c904fb1cea4c062d4f01a6b61a8036ac19b9780fed94d914939de0072f41c13dd5e7aeda7aff4e590e12fc4d0da0a6075ba111fc8befa402a87
-
SSDEEP
384:vDxplA70Nfef/XDNvIyv0nOdan6epRjbCDtyQrODFJCI4AvYALBJPLs5:vDPlA7ohycVRb8UQrsvChAZJPLs5
Malware Config
Signatures
Files
-
c5b15b9ce8e1d849ee6a89543f77e1143ce300b4818cbbdbd47b1f90d15e003f.zip
-
Kaufvertrag - Mahnkosten vom 22.02.2013.zip.zip
-
Kaufvertrag - Mahnkosten vom 22.02.2013 .com.exe windows x86
31d288880bf91724434417cff7bc76a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
_wcsnicmp
wcsncmp
wcsncpy
_wcsdup
free
wcscmp
memmove
memcpy
wcslen
kernel32
GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
GetTickCount
Sleep
SuspendThread
TerminateProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameW
HeapFree
HeapAlloc
HeapSize
FreeLibrary
LoadLibraryW
WideCharToMultiByte
GetProcAddress
WriteFile
CreateFileW
GetFileSize
ReadFile
HeapReAlloc
ntdll
NtUnmapViewOfSection
Sections
.code Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.o40h Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ