General
-
Target
4b51391defb5667047230eed1f8860d5_JaffaCakes118
-
Size
166KB
-
MD5
4b51391defb5667047230eed1f8860d5
-
SHA1
b0855ff1fd5bc958ad7b2b3343f787495ad94709
-
SHA256
f9c8ad0af18326bda3c00b9ad21ac44cc6491dca1e41270f4a9be25e45a84a4d
-
SHA512
92563c56b1cf1fa1d8f035f51f4cc2cf0c5fdc8e6fb52dfd70e5cd68a1b4e9e08597b1bf71d3be1bbcf02750c811259bd6ddaacf01df645e05c53a4bafa07820
-
SSDEEP
3072:6qHfoK3SRbQGl+mk5faXPCn3X3OJMYmac4ukUVsIILIogGm:6cz6tcmk5SfCn3uaYm94utsII85Gm
Malware Config
Extracted
formbook
3.7
jj
raproll.com
kombipack.com
dhl365.com
vhoxda.men
zisigui.com
i-o.ltd
serenitynowcafe.com
huntsafety.com
caquciqu.com
novoflexled.com
54smg.com
bintrade.info
34f7j3k.online
wwwjs80088.com
lifestylestimes.com
gradientdecisions.com
h-v-s.com
eternallybound.win
nafa.ltd
veteransusa.site
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4b51391defb5667047230eed1f8860d5_JaffaCakes118
Headers
Sections