Behavioral task
behavioral1
Sample
1784-63-0x0000000000400000-0x000000000042B000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1784-63-0x0000000000400000-0x000000000042B000-memory.exe
Resource
win10v2004-20220901-en
General
-
Target
1784-63-0x0000000000400000-0x000000000042B000-memory.dmp
-
Size
172KB
-
MD5
0761093242f65d699107932bb2c01713
-
SHA1
fde56d0214393c3ff5f1f658be00e955ecee95de
-
SHA256
96ff97c0a23f2ddd2323e3dfcb6b69cb489858f8aeead2292aefbb6d2cf22cfb
-
SHA512
bc4dec8b11211d2ba8ba1fbeb5288d3b7fecf1811e0f71c45fd980de5fe4942a38037bb6056ce676b9f603674406f6020c527f6b3387d8e8a96917f21510b1cf
-
SSDEEP
3072:hxDiDCov5qY2a3dWtEDko0uKX+nbcLEK3WXNMpZXXTlyseEAN:hYDC6qU3RDCjXgbIEK3W9uHy
Malware Config
Extracted
formbook
bwe0
GA8abA96SLI=
RjM/QAsrNyRPlNEjahNMdKXlPtbXpQ==
rOQ4ySihIKVFhRnhZxfZ
iSnyAlGXQBSBwz1C
SYfcQ54ijGWAuQq1UQTE
XRcVgsQIO8FVnvCOiHLvE3k=
K2XLULRJuod6I3dO
S4oH5i5i3+expw==
4hZdto3RgCY9esve1k7T5x9YPw==
fkpgXDuEv2NzvxCcq2AxMnE=
13czFGvtsco1gf8=
ub4KhXCsZ/qnnvYTijN3dA==
WD5IRIcJB51Hfs8grBnldA==
YqxA1LPudXGKyP1FlQ==
MZHXMBdZ8Mf2X3ZjSVY=
7mLLNhchknqdLVbz+6ci4VeD
66OK6kmRv8N6I3dO
+97y8jK5vTnIn8crIwyHnRxv03Kp
PC1PqPJ6573fH0aUnGAxMnE=
3BFlt4nJcA3Inb3TGO02bq++XzWRMVg=
JFWj7LK++b1oRUtG
TbxQMHrFdPd6I3dO
ltV+Zbop3H8ufAGhzN3O
mlcxPKADy6TjUdNgnWAxMnE=
GZlnUCk98Q0sfdIykw==
ejIKCEuKTCdRrCmEik4Llxxv03Kp
oBioj+xiThlFleT8Sb2OU6jyDjWRMVg=
FTiMDEy9JumdFnxiig==
3F/6yw1VGOkbfvl+wLtBZ+YotQlBMKb8sw==
gP2ZcmKh5co1gf8=
QB0tm/t82o5NJ0/hZxfZ
7p+eEFywCuQDNXv6UOqfYw==
VT09fVZax5pZOWDL1JH64Ima
6y+iWKUy3+expw==
QsByZl2v6YY/IF87hDWDmRtv03Kp
FMSC3UQG3+expw==
4iZslO0xz0vUntnn/fX2k6bkRPCE3nhQsQ==
QALQo+6BigCVFnxiig==
tGEvL4wVB82JcsmhzN3O
C3MpKHrHh0hV4B2p4dR3dQ==
+jBbwhmM9K3ABEXhZxfZ
Bgtm5ypqp4F6I3dO
gjAL+kjz7sphJ0zhZxfZ
XdWUftmHvYF6I3dO
/72t+jNqjjDTEV4tbVg=
DogcC2/11HdGqv2BEuHA
XgwEGD8FXWErZmlI
i0Ud7r7Ot39AkQrk3Y1frfEsNw==
ldkwfVSeU9dkhpeknQ==
Do9QPSpsaYJ6I3dO
lJCssH2SnGLkU+Y=
993QLp0nk1yDgZd1rBnldA==
k8cWkuts5VMbaZ9quHj64Ima
bF53yjBwIg9H
BYcZjHa7hWAyFzAQMyg616PYPtbXpQ==
XFSfGGr2bDP/ebB8x3Izrh5v03Kp
A8PhVrAswln64jlMWGnQ9pXThRZ8HLyi
yL3yWzZCyVcmpCbw7q+FFPkIFzWRMVg=
P8yKVC56enmwYp+HpaPR
OvT4bdZHwkTRntehzN3O
re6GEPc19FobfNUkrBnldA==
3JOU+kudyloQ/zcBR2FgrfEsNw==
B/cOgMQIHPYjkynCGiG5xbYaGwQ=
XqQpFlRw8m4bXJt0uZZ12SVNPw==
my1245.com
Signatures
-
Formbook family
Files
-
1784-63-0x0000000000400000-0x000000000042B000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ