General

  • Target

    00d120a94e918d8aa44cfd43eb5e8d4a42f204ee4d506d667d78a483ec9e8f56

  • Size

    184KB

  • MD5

    0b4ae2433d739714fc06eb2aaaf2f382

  • SHA1

    0f66e6a2a4f8b13bcd1cb18623ddbb65ce32ab97

  • SHA256

    00d120a94e918d8aa44cfd43eb5e8d4a42f204ee4d506d667d78a483ec9e8f56

  • SHA512

    655b0f2a1ca41cd5ab3f637a1b0b77d397f40679816bc385409ff7ba80e607b6cde022af78c35c2690c7afab126f2109310b90f77cc7781758ec8258d8a12fdf

  • SSDEEP

    3072:at247PD9MhNDTtkuJLz1pWMpOIlg71kn4V8xSuktX880UpkVpqRx6x1FYoCTQyO5:aEUD9MhNDBnP1dp6Bk4C5ktM80VVgqCK

Score
10/10

Malware Config

Extracted

Family

formbook

Campaign

dcn0

Decoy

ZVx68vDtAMBCwg==

oBMBvsNORkM/O/ox

Ff9pISWkm6eG4lByIspp

c2T42c6CIIF6B8xTxm9XzpVw

bvjhxRbnAC183w==

0lTttSNG4HUDNflyIspp

hPXFlstqiHA/O/ox

WLR+MeerxZ0cNn1ja+IQAYo=

IHRn4xXOVKi477zarG+ObSy7YJA=

Xhf3e+tdAC183w==

Xk0ZAezv2rWH

kngo+vBeSRN7AszNwam3Osmguuqc0MoC

a2Qp7a+E8fSw7LDjpnqEKjsRZA==

3zjy4E7+QM48wg==

YcCmqT3OUNAigVott2pBKiy7YJA=

4+SMeX1juat/5cZ1AZihcyy7YJA=

/+m7sro0OBTl3TMpCw==

i2ctEfe4//a64yklMsgS2J90

+loZ2QKGX0UWgpvErMs=

b9BNCnJWQJS8IfsR0uR3bCy7YJA=

Signatures

  • Formbook family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00d120a94e918d8aa44cfd43eb5e8d4a42f204ee4d506d667d78a483ec9e8f56
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections