97bb153eda799d6ad3e90831388d7f49 | Triage

Submit
Reports

Overview

overview

Static

static

Re,best offer.exe

windows7-x64

Re,best offer.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

Re,best offer.exe

Resource

win7-20220812-en

formbook ng04 rat spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

Re,best offer.exe

Resource

win10v2004-20220812-en

formbook ng04 rat spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

General

Target

97bb153eda799d6ad3e90831388d7f49
Size

945KB
MD5

97bb153eda799d6ad3e90831388d7f49
SHA1

8b79ee889d8ecd037db0f002a7575f581d20b9e4
SHA256

905ca7969120ac532a50b451615e33eaf2b17bf032587a3aa7445c132c60609f
SHA512

923bef923a4c8df7a6e8b9faf6e4ffb5eb1f5e1519dfa6dfc697fe3798eef52e01b5945e0e3104f224baf6910b94d863529ad410303338562a0898ddb970fc53
SSDEEP

24576:jsBUj9BEyqQaDd+2TkSBWKOn21CqxkSIeAoIjx:jsBU3cP/GUATSIF

Score

N/A

Malware Config

Signatures

Files

97bb153eda799d6ad3e90831388d7f49
.eml
Re,best offer.zip
.zip
Re,best offer.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 918KB - Virtual size: 918KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-plain-1.txt

© 2018-2024

Terms | Privacy