Overview

overview

10

Static

static

10

JaffaCakes...62.exe

windows7-x64

3

JaffaCakes...62.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_46f307e9820e5ce71371d5a7b119d3e4847bc745650d76aafa53466c95b13e62

  • Size

    188KB

  • MD5

    efd914c1aa156cc2fa8945ca0040faa4

  • SHA1

    50614f2c3b04ec36e0373f91919027d9ea03f1d0

  • SHA256

    46f307e9820e5ce71371d5a7b119d3e4847bc745650d76aafa53466c95b13e62

  • SHA512

    de0d8cd4175bec10c2b29923f3c48e6832201de8a8d5f5a1cec23d62fd43b1187b1bccfe8fcbc777afc35a241268fb1b0d33f55b6c4e53681cafaf130d2392f9

  • SSDEEP

    3072:ZPdpGOL74XcYfbFtWD4i1G/RpUvZ21LHMIA1z/Z4vR0pbCf/+5tUtZIpphphVW:nHKJbFuc/LYs9MIA1zR4vRr/+5tIGpts

Score
10/10
ratqtmtformbook

Malware Config

Extracted

Family

formbook

Campaign

qtmt

Decoy

tLb7wFo1Zl2NiXA=

dNmY9Q1KhjY/o5D8LXDR

+ucQSs+m3nzuPsVnjQ==

Hn8lBZJ76Z7+SsnjRnvf

IRs5aBFo437W1Wlu0hkvqzaD

oXegGlGpBLW/NxVp

HH0nUei92Yab7bBejw==

5JU3JtIcr0uIonO32Sl6dwgGrw==

3bRrSABLpCp/k09s0hkvqzaD

n/qnm0tzPExaZBtKzFR4yAE=

+8bUvHrXYf5Qgluiv1R4yAE=

ioOSx204Zw6Kn1n/P1blU+zrpQ==

AYMpWgVetqoAHQfwKf9m5RY5TVavKfNQ

m4Sj3nxy0s/2XShXWuodzx4=

UbFRQvjW74bdblqdmg==

JeWyHEuoyaLnSmU=

ku2TjUA2iiRy0cw7V2T0cKHXY/E=

Jn8qJMu05pXqPsVnjQ==

mImwJemw24CxPsVnjQ==

ovC3AqR9pFi7AQPs7nTGChVEcQYx

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_46f307e9820e5ce71371d5a7b119d3e4847bc745650d76aafa53466c95b13e62
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections