Behavioral task
behavioral1
Sample
16c2006afa67893f3b8273107c0cc922.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
16c2006afa67893f3b8273107c0cc922.exe
Resource
win10v2004-20220812-en
General
-
Target
16c2006afa67893f3b8273107c0cc922.exe
-
Size
172KB
-
MD5
16c2006afa67893f3b8273107c0cc922
-
SHA1
7936a2e54f1bbf47e8b8220d4ccf6019449fa363
-
SHA256
b0ae3ca7341aa9dc52d29a52474f56fb10247b610506933bda8c8ee226308ea8
-
SHA512
0ff0f545bb05915e6c0b5b54678bf097b70e356d248a975dfe28a0ec593bbc52b4caf94f4cea102497050f29ba462a756a23d5635790c34fbf670dd660ac2106
-
SSDEEP
3072:+gkLRkjATMh6sVdCMWVqgiPiZZJiNhSUojsSCZGhUIWocnKf:q1MQs7CygiK5jDjqZGhUVocK
Malware Config
Extracted
formbook
qkwl
aMyAu1z8fyRuwakX
NS0UVhSZ/JU/P4Si+hF6
cmMpYZZG1vw3gROhlxqsQabceC+DcR0=
j3VUa2opiKFg76I6t6go2PGuhRA=
+1cgLkkWkC88/xG5j02oUgC0
rZRleouWeKHfGbvl/TM=
ieKy75LY6oq/iKRjXcbCmb4=
wi0pZJORYFyLzVb6R33QOQ==
jgnV/GxENVB5uVr/R33QOQ==
Ae255Oig7H25OfOhM3jMnWG6
btPOCjUN73kOC6lN3wB4
0DnyFQ4q+v03EkQSllWgj7Gj+Y6t
SMGe5oQUfRxuwakX
DOmezHPMNRYOj08=
8sGM2vYFEucnUSQKJnWfVvbc9/vfQ5Ch
vzkMezKriU2J0Q==
LxHjKtpAkWpLoVY=
N5Z8mZxnOVVyQYKi+hF6
aj4gYvhv3W+W9Uuz0xNCuKyj+Y6t
vyXzKsf8/qo0BUZD0MXx5/6y
99+/7pvq52TtA/Si+hF6
/u3H5qDQy2L9Dxzki4XnZgmQhJ6vEw==
41UjQrtWtlfGzgc8R33QOQ==
g4NUiK9dwtMs7MTBvw==
69u79BjfRO4R0+ei+hF6
0UI6ZoyEiU2J0Q==
FndJm6qriU2J0Q==
m/7oJ80cCppTZbijSRfx5/6y
YjUsWAlaUW+oG8iKCb3+efabhJ6vEw==
yrV8jJRPkmpLoVY=
Wt2v3dnay+gpNIKi+hF6
IAvd9PYI/x9KjymnqdESjolcFKz6KYup
KoVTmLq4t8sFADfl93zSVPBMHuLulllhag==
ppdoiHt2M0LfYctAToScXbrI14/6KYup
RDX1KqLu4G4UN1EI1JTSosY1Sw==
3rqKtOal/RHEQQDe/KIe1zND1Yun
npR9npWcmrT5CfCi+hF6
0FEjLrDuyVX3Cvai+hF6
fGtNi6zCnJnf/vCi+hF6
KAbq/Ii4iKHm4RrgR2iaIA==
S8qq3XXxjBXD
d21Kb4tMpDtWrBsZEDk=
LhfhHDsY8AouWrwsNlqYgvGuhRA=
GwfqAqZDoWpLoVY=
iAfo+hLnprHVruewJDt1NnYYQQ==
rBvnAIkQhWpLoVY=
JRnUDSxIMEg9ynJ6cgOLMQ==
OrmjuD+Yia7x7RisoBqANnYYQQ==
J4tvipte1/GWG4kNR33QOQ==
41JOhL3c6R5ZmyoS+mBz
xMS90FXgOdNnakywRKYNi6k=
o+7ACTYtBAwhX/qVoB9/NnYYQQ==
JIVThChxgBqpqrnI+GV/
uZ9qeQiBApi7enL4fLkFo9lmB42l
ORrdJn3YPFIEfzHzN1rWLg==
guvKAi0j5X6HSm4arU+INnYYQQ==
EvWv2gLNLdDvQZUXSda3Z6c=
xCcXUH1BxuMsNgatug==
AlgrMLH201WcY1rPXBXx5/6y
PQtnCHnxjBXD
cl8YKSoM8olGXzulRxfx5/6y
nItVanM0kmpLoVY=
PiX/ONmiBjvoNgatug==
fkstaRJQN0+RbQbVUx1HPKorA4+nBw==
scattergroup46.xyz
Signatures
-
Formbook family
Files
-
16c2006afa67893f3b8273107c0cc922.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ