SecuriteInfo[.]com[.]Trojan[.]MSIL[.]FormBook[.]OHN[.]MTB[.]5410[.]2151[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.MSIL.FormBook.OHN.MTB.5410.2151.exe
Size

649KB
MD5

ae720a3f8604f27f98b33bbf32d741c9
SHA1

85655d2685daf62197b83d1b21e2c326c810e632
SHA256

4fa83a153d5825329b918f2595ab7573ba331920eb122ee5c8baa1100049312f
SHA512

e2dc31462913be8b34451231ed6055d57ad3682e5d9ca7b7c3db07bc5dc74cdf0abcca3f3c9d9d51734ea776908bc2e03dd6263ffca1eca15f756c9aaa20e8d0
SSDEEP

12288:OwNfGlA0n0Akhv2YjyrsVEDpYrYOA3NR20BB28pREAmD:VNfGAAkt2nsVk6NuNRtlpR

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.Trojan.MSIL.FormBook.OHN.MTB.5410.2151.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 580KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ