General
-
Target
JaffaCakes118_4ef1091f2d23851e8d4085761a848b8cf15152525fff3c08f5890706a47a78fc
-
Size
188KB
-
MD5
b50faa8dac28f7fab71587bd28bce92c
-
SHA1
c8b0d15ebc9daf14a8d4379b65d9234e543debf2
-
SHA256
4ef1091f2d23851e8d4085761a848b8cf15152525fff3c08f5890706a47a78fc
-
SHA512
8b0ab5f9fec76f213a6fdc0b24aaad2fa2fc5a0593e5a32d3c44099daec1108fc6414dd113f383eb792ba71801bc4cab0c273aa05ec31161912ed08933036fa7
-
SSDEEP
3072:9LdEuhq0cbs36kIAL9aJFRlNibg5jW1uvtiuELxNPmK+DrQruYw2:zUi61ABaJFR/EgZFtVGPOHY
Malware Config
Extracted
formbook
4.1
mr06
dreamrose.shop
bamdadlive.com
avastfr.com
aishabolduc.design
nobulldownhill.com
navis.store
paintingsantaclarita.com
wdidfhqo9751ds.link
epilateurlaser.info
expertdoctor.xyz
jtfaqyxo.work
zrexvita.live
coloradomarketingfirm.com
prestigehospitality.solutions
bmayple.com
sea-food.online
mejor-proteccion-es.click
tophatlimitless.buzz
inailshickorycreek.com
tintash-sg.net
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_4ef1091f2d23851e8d4085761a848b8cf15152525fff3c08f5890706a47a78fc
Headers
Sections