Static task
static1
Behavioral task
behavioral1
Sample
Fuberweisungsbeleg.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Fuberweisungsbeleg.exe
Resource
win10v2004-20230220-en
General
-
Target
Fuberweisungsbeleg.exe
-
Size
256KB
-
MD5
4435b4a80780cb4cb91a3155eef5d9a3
-
SHA1
bf711dd54f2e8bad8c2b90383d394f2db428029b
-
SHA256
568190e692a1a6e1b168560461205da4fb7854bd7dcb9ca7a67104bd6331e8f4
-
SHA512
657b16f0f34cb634d5e7163f70df2b59340bf3cb595d9adc0d16453c6ab513df6f921444d9f96c9be0c1b3f00c1733283df1fd357812bdba7d8cde766be01273
-
SSDEEP
6144:CfvUYpD09ancvvUyx7ZQSqyTn9BljIPqnck:Yt6+KFZVnBn
Malware Config
Signatures
Files
-
Fuberweisungsbeleg.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 254KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ