Static task
static1
Behavioral task
behavioral1
Sample
ZAHLUNG_.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ZAHLUNG_.exe
Resource
win10v2004-20221111-en
General
-
Target
Zahlung.jpg.img
-
Size
1.4MB
-
MD5
5f6b2db95a39b931b5a7084ea8375717
-
SHA1
7f56010b5165568b4af0827b8a93821ba91a2878
-
SHA256
0bad8d1f6417bda422bc762403bcc9260dd3406d5d7f788833a3c956ad7e86f4
-
SHA512
c851f1f4c0366849c266432d3990bfdc5b3d1f239f344b0d6b95e51e05bc2f985e3c602f86997d865fe31975085276efa989ba8d4b4728a4ea72ae54baef64f0
-
SSDEEP
12288:5ZflYWr87728fM/f6RSabB2RiTh3DTUYX+IJNCNJ9i7+pv7c4N34iDstW7RQxK6R:rflYWr8BMX6R5N8CzTAJw6R7c4N34V
Malware Config
Signatures
Files
-
Zahlung.jpg.img.iso
-
ZAHLUNG_.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 892KB - Virtual size: 891KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ