Behavioral task
behavioral1
Sample
d93db44add0a1601472c9367293d29af274a2dca1bf9ef4c0829755000c3c37f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d93db44add0a1601472c9367293d29af274a2dca1bf9ef4c0829755000c3c37f.exe
Resource
win10v2004-20230220-en
General
-
Target
d93db44add0a1601472c9367293d29af274a2dca1bf9ef4c0829755000c3c37f.exe
-
Size
180KB
-
MD5
b8b590cf36103ce61ec19acdc4c6ad21
-
SHA1
f34947712889bd56afa42801678572a147f42f5a
-
SHA256
d93db44add0a1601472c9367293d29af274a2dca1bf9ef4c0829755000c3c37f
-
SHA512
3e1657196b15f029c216878435c770f522b86c48ee48bf38d6ca0dd63638c0c95ec8f52acd5661860af68c25cbed8e5edb5171b7e445284e11f4a444aabb79d1
-
SSDEEP
3072:trU9J6IssW1r0pWC6NILfk+522QnvG+CWiN5dmuvV39swL5RxgH:4AM00v9D5n+vG+CWiNLV39fNH
Malware Config
Extracted
formbook
qsqm
gYI8BO7T7BQOBw==
5kKpX8NHT4cITCAOEkMYvi5HiMZ5
oq5lCVwFY9KNJipM
OiTOjWhDMXBf8H9o79k=
rSDHx5jqNn3Sz/LND/0G
ob6FSUE4NYUi5Iqg1YGfMg==
fI5oMbAC5EAeerSKKRM2PjF7TYJh
lmWieqE8QHg=
yLxwFWm+rbCJXqE=
MyY9R8VCSaAtEJY2MdHAXKY=
WYA53Ezjh808
EPu6bfMPNJUh
upyUkeqQ6B/FJyq2PCiwnZf/
RvN3e2hDLJQmo9qtZTVoRmPi
hZhWEObjh808
K1gowrFsO5p0UchTUEVoRmPi
7hXPaZ6i+F7o2L8OCCyhNA==
bIp+E/xrSG9QHA==
+EPrJAdvSG9QHA==
METFhoRGH1sBBWhAbA==
pr3l7VLjh808
cYZjKJ0EDWvmulzpQjMf
qii6s7mxA2g=
Ym4qvyLePK+e9grpQjMf
0J0TAuKfdd29mRGlxCIXqBwOIeQ=
+P4L9T2Wj9+NJipM
4xsZCg5v7FU8HJUkJBn9FTV7TYJh
sIJ8FgmASG9QHA==
ReyRnphfRIwsFhPpQjMf
DGZugWVIHE/6BWhAbA==
hAxO/V1KqRgWobhL1IQLjLs=
3Kj+sI95ns28hK4=
SN1bhR3XHWsDVmYElpDzhMKsAK3uJ/SLXw==
q5KFa+63Ko1qQsBbie/6qBwOIeQ=
Y5JjKAO+qPV+dzD05dX/av6KjQvPRuo=
zwcQGaKfE1XsTdDreuzypzwwRP0=
GI8jFvtiqR0Fca7NwrPU9xwOIeQ=
kcKnVjiV/SAmpLY=
ypw0NBTWvwrMxWc6V0NoRmPi
LGRqVa+M9l9/qLM=
trr3sce9OJc054wk7aDpiaw=
5SkqKIwB6FoaDAkaIszoiqw=
67ge1GRDpRLjkEEXRLIX
l+2uhu7ldbtBth1s6tE=
1CN1N7KXFW40t/7pQjMf
5hrSTWdCSrGNJipM
I2dlU1i0FHlBxh1s6tE=
SGpABeLIrQiOFK3WfvLxrdlZUfk=
Cvy6Y7pIJgsABWhAbA==
93ISFvBLsRzAIZEp3Mg=
2sjOvi4Hdrlgv/IL//MiNnzad69vVHvh
JlhaXsQwEn0j+JH3aMabybM=
QzP4vTGQk92LKLtQcQ==
i3SGeeqqFIeV2EpUuzN5Jg==
DYAmHaUEBzn3e5Qsqp8eqCmZFsjxVg==
Lz0V3VHjh808
WeF2bVoB0j32DUkozoQLjLs=
ublvHJZZlf/RzlTv1YGfMg==
i6rX4kfSateimHwRJhH9HDx7TYJh
zYrw3cyuuh8xzmgzULPAOg==
yIvXnpZRJ2XQmjT/JB85XUF0hgvPRuo=
uqjBwhzWImrUzPa/XztoRmPi
ariPQDGQ/CAmpLY=
IOp0hWHEM55x4h1s6tE=
cabinetie.com
Signatures
-
Formbook family
Files
-
d93db44add0a1601472c9367293d29af274a2dca1bf9ef4c0829755000c3c37f.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ