gmSx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
formu.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
formu.exe
Resource
win10v2004-20240802-en
General
-
Target
7dfb0e728c2d4b5fe68fd3e499750cd4d961cd5a0c079a2ab13934f8a57e5793.rar
-
Size
684KB
-
MD5
14d9e8de60a76a063618d6f57348e820
-
SHA1
12314f9594581462ecced6061d5b637576436964
-
SHA256
7dfb0e728c2d4b5fe68fd3e499750cd4d961cd5a0c079a2ab13934f8a57e5793
-
SHA512
f236712f3bf1307032577d9f2c2ea234f64b79d297ff73bd3492269884ebd462f4651a469d815945e902191d821bbb763beb8816e824e254befa3dbcdd95ca9f
-
SSDEEP
12288:uIpiAaQ6LjoZhp5JxPPoT7rlMMRrVEIoqx7W/yzWfx6D8GrKCFmXBBL:L41Q6Lqhp53YT7GMR5EIt1WazWMD8G9a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/formu.exe
Files
-
7dfb0e728c2d4b5fe68fd3e499750cd4d961cd5a0c079a2ab13934f8a57e5793.rar.rar
-
formu.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 695KB - Virtual size: 695KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ