Behavioral task
behavioral1
Sample
7531e4019e9dab1b01517164c36d0328a1bea4abd9988135271d26def2bc326e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7531e4019e9dab1b01517164c36d0328a1bea4abd9988135271d26def2bc326e.exe
Resource
win10v2004-20230220-en
General
-
Target
7531e4019e9dab1b01517164c36d0328a1bea4abd9988135271d26def2bc326e
-
Size
180KB
-
MD5
5ba54f0c7a5ecab01f0f66c372677760
-
SHA1
0e6ef65507b9e51435ce9106406318882ba4a7c9
-
SHA256
7531e4019e9dab1b01517164c36d0328a1bea4abd9988135271d26def2bc326e
-
SHA512
dc9cf0c532833cde1fac273cc400beea928c63f0bf31ceeddaa46df806cd23f1ef3a1c553f057e20c90827f1ade17cf98cdd0b6e1334dd9f98daf354ec72feaf
-
SSDEEP
3072:trU9J6IssW1r0pWC6NILfk+522QnvG+CWiN52muvV39swL5RxgH:4AM00v9D5n+vG+CWiNqV39fNH
Malware Config
Extracted
formbook
qsqm
gYI8BO7T7BQOBw==
5kKpX8NHT4cITCAOEkMYvi5HiMZ5
oq5lCVwFY9KNJipM
OiTOjWhDMXBf8H9o79k=
rSDHx5jqNn3Sz/LND/0G
ob6FSUE4NYUi5Iqg1YGfMg==
fI5oMbAC5EAeerSKKRM2PjF7TYJh
lmWieqE8QHg=
yLxwFWm+rbCJXqE=
MyY9R8VCSaAtEJY2MdHAXKY=
WYA53Ezjh808
EPu6bfMPNJUh
upyUkeqQ6B/FJyq2PCiwnZf/
RvN3e2hDLJQmo9qtZTVoRmPi
hZhWEObjh808
K1gowrFsO5p0UchTUEVoRmPi
7hXPaZ6i+F7o2L8OCCyhNA==
bIp+E/xrSG9QHA==
+EPrJAdvSG9QHA==
METFhoRGH1sBBWhAbA==
pr3l7VLjh808
cYZjKJ0EDWvmulzpQjMf
qii6s7mxA2g=
Ym4qvyLePK+e9grpQjMf
0J0TAuKfdd29mRGlxCIXqBwOIeQ=
+P4L9T2Wj9+NJipM
4xsZCg5v7FU8HJUkJBn9FTV7TYJh
sIJ8FgmASG9QHA==
ReyRnphfRIwsFhPpQjMf
DGZugWVIHE/6BWhAbA==
hAxO/V1KqRgWobhL1IQLjLs=
3Kj+sI95ns28hK4=
SN1bhR3XHWsDVmYElpDzhMKsAK3uJ/SLXw==
q5KFa+63Ko1qQsBbie/6qBwOIeQ=
Y5JjKAO+qPV+dzD05dX/av6KjQvPRuo=
zwcQGaKfE1XsTdDreuzypzwwRP0=
GI8jFvtiqR0Fca7NwrPU9xwOIeQ=
kcKnVjiV/SAmpLY=
ypw0NBTWvwrMxWc6V0NoRmPi
LGRqVa+M9l9/qLM=
trr3sce9OJc054wk7aDpiaw=
5SkqKIwB6FoaDAkaIszoiqw=
67ge1GRDpRLjkEEXRLIX
l+2uhu7ldbtBth1s6tE=
1CN1N7KXFW40t/7pQjMf
5hrSTWdCSrGNJipM
I2dlU1i0FHlBxh1s6tE=
SGpABeLIrQiOFK3WfvLxrdlZUfk=
Cvy6Y7pIJgsABWhAbA==
93ISFvBLsRzAIZEp3Mg=
2sjOvi4Hdrlgv/IL//MiNnzad69vVHvh
JlhaXsQwEn0j+JH3aMabybM=
QzP4vTGQk92LKLtQcQ==
i3SGeeqqFIeV2EpUuzN5Jg==
DYAmHaUEBzn3e5Qsqp8eqCmZFsjxVg==
Lz0V3VHjh808
WeF2bVoB0j32DUkozoQLjLs=
ublvHJZZlf/RzlTv1YGfMg==
i6rX4kfSateimHwRJhH9HDx7TYJh
zYrw3cyuuh8xzmgzULPAOg==
yIvXnpZRJ2XQmjT/JB85XUF0hgvPRuo=
uqjBwhzWImrUzPa/XztoRmPi
ariPQDGQ/CAmpLY=
IOp0hWHEM55x4h1s6tE=
cabinetie.com
Signatures
-
Formbook family
Files
-
7531e4019e9dab1b01517164c36d0328a1bea4abd9988135271d26def2bc326e.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ