Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan-Spy.FormBook.26491.8044.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan-Spy.FormBook.26491.8044.exe
Resource
win10v2004-20230621-en
General
-
Target
SecuriteInfo.com.Trojan-Spy.FormBook.26491.8044.exe
-
Size
14.4MB
-
MD5
0ddb686798e1232b6066a00db2b25e45
-
SHA1
1ec1042497fb368cf25b3be5da4ceb36c5adf4cf
-
SHA256
0d5a17d3f0689e944a37bf9424e19493280b77c4014cbd3d1c491977fffdf869
-
SHA512
4e72ce3348f8723ad2ef54cabbb94e3955a7d6536ea41f673089382efdb7b19b1c02d04690edbc1703623785fdb5f6bf389eea544f1672b82bfda1ac26285cb8
-
SSDEEP
393216:4HD/VQHnuC0KPxcGTjAAc3+xMO9anZ6SzU4wtfMRKpBt:4j/VGTjcuwZ6OufMRgr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan-Spy.FormBook.26491.8044.exe
Files
-
SecuriteInfo.com.Trojan-Spy.FormBook.26491.8044.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 14.4MB - Virtual size: 14.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ