Overview

overview

10

Static

static

10

JaffaCakes...a9.exe

windows7-x64

3

JaffaCakes...a9.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3ca5769d146b6483ca78f60c9bb7790ea50fe0a255cad9fe156b4cbbd73856a9

  • Size

    188KB

  • MD5

    2aafb9e45695442e40da6c7fefdb7600

  • SHA1

    a76578ee4b6343b96bc4133a0399504aee015fe7

  • SHA256

    3ca5769d146b6483ca78f60c9bb7790ea50fe0a255cad9fe156b4cbbd73856a9

  • SHA512

    d5b2570458582ed4d4c66adbb9e0de8963f4ad6b0a3ea6377cee11a19a8c8aa5947435634a982d4577cc90f1abb18e4f3f29b3de09e783211d50d00cf6138d75

  • SSDEEP

    3072:f/dmPRHuNuR+QdNWI4ICw2je3nSZ2dy8mtBoEcvRP12dek/lUPgJWML:XWKujdt4d63+Wy8mHoEKRP4gk/uI

Score
10/10
rathzb3formbook

Malware Config

Extracted

Family

formbook

Campaign

hzb3

Decoy

BVGWUXYpaaEaNSjsCHhJnDJz463cqQ==

CEqdZb0KaOLLbWqrDVTgc20=

nBv0jSFiQHxtE6awQnm2

E1sGpCJYtB8ImaguUyF6yQ==

PMBND7LzJGZH7CXulclbs2c=

u9zzlFGDXo6LLbGwQnm2

SaJjLbtVlMgsP5ZQRj4=

wckwEbwBbKA2X3g=

rPxB8ePUxfu4pilu

S562QFeKY5P//qawQnm2

BkEfWXZuY3ihKW8=

ZanakqMxkP7VdNfWdD4FGDqF

PYYbtzdINC1J0OYzQCk=

Fmg9LBxaPQ==

4eXWfoC06yGAkQ0l+Txs2w==

n68j2X6+CIhsD5GiCMYBsHI=

hRv6hpW3qfLbdI1XJ/J825G1TslJ+1JE

X6PAVGfwPHihKW8=

7zn1tkuDaZ2FKbGwQnm2

lB0m5ghWsSmMpIUS8EBM31l/463cqQ==

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_3ca5769d146b6483ca78f60c9bb7790ea50fe0a255cad9fe156b4cbbd73856a9
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections