Behavioral task
behavioral1
Sample
abd675c4882ccebea611457f5c285488dc22229b46f55382c71c1e8b4807f87d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
abd675c4882ccebea611457f5c285488dc22229b46f55382c71c1e8b4807f87d.exe
Resource
win10-20220812-en
General
-
Target
abd675c4882ccebea611457f5c285488dc22229b46f55382c71c1e8b4807f87d.exe
-
Size
180KB
-
MD5
c1aedd3a7e2cf94dc3931319196a5fb8
-
SHA1
45c71f87af03fbb3494db2327befdc0d09a062db
-
SHA256
abd675c4882ccebea611457f5c285488dc22229b46f55382c71c1e8b4807f87d
-
SHA512
238a150078f7d4cf4ea9218d801ac2a0dd00c9152f73ad02e8acc37e32dc80287bc69691c03e638d1767336b064598c97f537a59472c132fe8dfc09811281fdf
-
SSDEEP
3072:zEb7MFabD850Q2T9gb6sWujYQoWX2OxB9eBw/qOXJ6ntTFx27Q1sA8KCYJ:zEc8bcP6Eqs24B9mIqYJutTFxFNAYJ
Malware Config
Extracted
formbook
knnt
u88RLEJAcwY0Le/5QQ==
u0ORnx5t0ZjI9c5L
zQBeeggGQ1WEAank9GhHmQ==
Lxpd+ru89YSg8tDjWXo=
2HFnNtdCw73eNtQWVGAETOqKLMZh
UUQSo7b3cT1bxNDjWXo=
zpPQV9I2mnG6DpnuYSclITI=
c6vsjqq36ajUGMJ7ge+7iNqKLMZh
jMUrSt3VAwgEPtAZFtOhOp5BFA==
Ufs53xIASYvMOROdjSDnXBrIjoOLmd8=
IQZKYHbWHPE2fg==
btUMJ8INkabpbAkeVcAx
UVtRLnK2O8wubAk=
34LitNMIdDdEkXy8G20=
nRVRZO9DvYaqJtkeVcAx
hdErS+w8p3Wa6NDjWXo=
0sueOVp0rTl9klWWX3w=
gSWFtIKXzOkVehphXJRCkw==
5GmruydMkk1kwNDjWXo=
iXE30Rq3+gUd
+9a4hInYafIZUNvq9GhHmQ==
QPtlfmVulpgeexVc
Iv1AJ0ZirjqwG+49+HI=
fd/GpV9qvQMljCy1RCclITI=
szUIt9aJo9JpLe/5QQ==
TS5NeLYb/w8e
C86eXnl4sTdXjXvDNnZPPjo=
1bZ/InDOUlqMCqnw3U23+Yn7Cd5D/w==
eHGkZg0mefAIVPA493Qn4N2FW35sQ7/i
cIfJ7tH8Pvw=
U2ZeAPwHRfUJV+QeVcAx
BV8r1do98OX1dA5b
XGSjvM0LfwNWyZvn9GhHmQ==
XNH9LdQ9C8wubAk=
enVXAzly4dn5M8tPSu+7OeaKLMZh
A80y95LXa7D3Vgo=
568XMwZFewYrcxme4kAEEDA=
3vz5zu/y8MD4YQ==
LXvjrtLqI8oMXPSDPWxNuTi0qLYAeJEiLg==
vbyZQoDVM73J3Yz/Vg==
iR0P3jpuoLUbGb1K
7ziau2V6p6XvCNNT
leKyQtQgn+n7UcEOfldhUEsxkSg=
hLwd5QERTcwubAk=
NUWFmYzDKXan06kq4gKGkQ==
teA8AwsCKehVTt4n93M=
+eWtUHOxOik2mWze9GhHmQ==
rJfY6M8GbrPcTCBeYSclITI=
TWuvnKniTMwubAk=
yY4OPGR+sgsiajBLAah0lZA9
UKDibGNqkNQ6fBgzXw==
ul/Dj6696ajsUu8p3XWUNTc=
MTeKnqHiHPE2fg==
DNEsSG9wurEbGb1K
tLwG8PwsqKXvCNNT
mQrncmNnfAkbdA==
/SK2MkW+Ke8=
vRnviPXtHS9yg01f6Mo3
IkmoyN00pvL+Wg8eVcAx
+UKUZorbHPE2fg==
Zf3nfLwTTWKL2Hi+Mc07
gn+61NYhn/w5gQ1fVcN0lZA9
Cgf3p9TBBh9Yx6HtUCclITI=
5e0pRGK2O84cLe/5QQ==
aaronmachado.com
Signatures
-
Formbook family
Files
-
abd675c4882ccebea611457f5c285488dc22229b46f55382c71c1e8b4807f87d.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ