General

  • Target

    JaffaCakes118_b7fc01cc659d717aeb532841cc6bbe49255a1a433e394c78fc68376c15745eee

  • Size

    188KB

  • MD5

    b60acdfcdad262f97bd90a7699f7efc7

  • SHA1

    969c1c62c50c736fadadb5c187b21923e271f126

  • SHA256

    b7fc01cc659d717aeb532841cc6bbe49255a1a433e394c78fc68376c15745eee

  • SHA512

    0899a2d3622bbd534b9c284be3495c0280323a496b9c861f78bc5899e611cf3d98f9a7570742e26acc6d264bd0e4dec15740e927102bfae4879a159d3dbee99c

  • SSDEEP

    3072:kaZHE9uX5+6EL43lTjhapIBQNQP/NoMBE1ehPr5g7FTLArFuiw:VK2l3cpIBQNQ9LBrr5g7FTLEui

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ah4e

Decoy

refurb.biz

triowhauclouf695-nifty.xyz

abilityrhetoric.icu

ceooflebanon.com

gaguoa.com

nic-company.com

whiskeymademedoitcabin.com

7477ll.xyz

socialstars.life

greenhouserobust.top

quantumtech8k.com

munspace.com

iotatube.com

crawfordandthomas.net

mrkenparrish.com

aaiua.xyz

ctlsense.com

jiven.xyz

hanmoon.store

956726839.xyz

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_b7fc01cc659d717aeb532841cc6bbe49255a1a433e394c78fc68376c15745eee
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections