Behavioral task
behavioral1
Sample
1788-67-0x0000000000400000-0x000000000042E000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1788-67-0x0000000000400000-0x000000000042E000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
1788-67-0x0000000000400000-0x000000000042E000-memory.dmp
-
Size
184KB
-
MD5
58226d3b9be1f8762c6b0bb73c3f3e4d
-
SHA1
378f1cb1ae84e7f10349776209e327c7b0c928b1
-
SHA256
308380f2aa7ef155b086afb910a94256a353ea1aa7b4962408fb88b6b5d053f2
-
SHA512
5ec89dc2eac2f08b27ce78d321ce7092326502775f3b94d5749a8c5de2bffc17c17a333cd4ffe4137d3581b35ad42ee61c09d23bccf0cfd88be26238861d4550
-
SSDEEP
3072:yXrrcgyiHnkgvQIsxWRGbX1k9sQaQJIFxnMXncXMYpjdhM+3HRQU:yXk9CsEgYsVIIFNMsXMYpjx3HRQU
Malware Config
Extracted
formbook
mtbj
26+DgijLsdx+
Qa0BmhvnJLZw
gU8PoT4BePPIsQbnS3CPjdKgv5X8Q+HX4w==
TOnRXn9ifG53joqZCg==
vEm9ePGYX8LfSQ==
KMkcrwXTe7rKQw==
4rWPkGhrxWyKEf0Qd4GcpOdBlWulqA==
X9orLUnm6OAtoVqnnTM=
uFGuWAOwSP3EuoQbEZnD3i6cXypGQDEw
Iwno97gH/hR20yiafUgfOsY=
xbUcrXM82n4RkwyKZQ1+AiSh
64Rj3gka8Rg0Xn+nEw==
A4uRRGqREJ6R8uipl7xbkAznuop4tJY=
ORvLfQE4Qns7ryE=
yHFfegnor6+1C7neFZlB
azSp9EqQ+aR6k0+l
5cWpqFmqxAKYhV7eFZlB
8ZaQymhK+Q6CVVqnnTM=
wTwLFK70ITQvGcRpXwt+AiSh
TS2qOVibqx6wc8qt
1V69wN5FK+Fh5T4=
hjF4/JvmGqhpY9ruaH3IEZSkNgVx
8F85aCF2gcI6fnm8
JaQNGjrPsx5w4zw=
az00Y1p7E7Bq
6J2g0jO2wes=
eWBain7gOdmJXbGO924BRtXPlWulqA==
Opzr5g2GZor0c9MmERxfpap1eA==
sEKksddzgns7ryE=
Idta+rY0FzmaDbLXsDk=
H7kP9gd8sS+zUWDeFZlB
fvLxiYxrPunzVA==
khUdy8wH/hSJVVqnnTM=
12K7ttRuaXrocoq9
1GHqtYADLXdzURpbt/JJ
/6uLCCwWbzVXtIOaOiN5ig==
JdXaJDuog3s7ryE=
JhkAKWbzLsCGjoqZCg==
ZDE6g58eVd58WVqnnTM=
AbUMegvFNa17XbXeFZlB
Nt/S+MHWoJJ8yoOQOiN5ig==
0ph2i6co+fxCo1qnnTM=
U9VA7YzkIqAdoVqnnTM=
0pmTqGx3LBfs1i0NixR+AiSh
z6ilydZDeAiMVVqnnTM=
cjUzvOLbN9V6k0+l
LaJsekJdyR6KVBWWe0gfOsY=
x52nyV5AAxQyXn+nEw==
SBdt5HveAIttZt7vpmaHkw==
FOZpDsg3+u8ziD//OiN5ig==
wAC3RGH4nb4ZlmStBA==
yU/P/CbP0Nk/vSxLsTp/jaSkNgVx
oTHD4qT58P9l1kPRwWcVYNaUPUegog==
4MWgsnGutdhGEgpTMslc
DbsRrHVCvFt07dmjiXsHpap1eA==
GzFwFsxtgHs7ryE=
PO7nNE7OI+J6k0+l
xXY6A5WSX8LfSQ==
PvtY20NK3oF57OWnhC0=
y6uiu3zC2QBCpFqnnTM=
Q1IrMtSlYGVv39mabUgfOsY=
41SzW1I3o9/pUA==
S92r1vaAX8LfSQ==
EOepptNXiBGyq45m/YYNZs4=
somosmaisque1.com
Signatures
-
Formbook family
Files
-
1788-67-0x0000000000400000-0x000000000042E000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ