Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...49.exe

windows7-x64

1

JaffaCakes...49.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_88036be677d6fb98059cc9f2e472a5058a341831142d12a1a75c76b148d56249

  • Size

    188KB

  • MD5

    102fc49f18a5a9851d605fdecf31b985

  • SHA1

    b0ab567b20ef4d5c88941ca38a62274fba0ea257

  • SHA256

    88036be677d6fb98059cc9f2e472a5058a341831142d12a1a75c76b148d56249

  • SHA512

    0d1d2c55202631e17906684b4052ec48744675657a8e1f2f4fa52c2475aa00a871788a6f3ba143c5206eec61bde915300ccde4bd5f4df4f683b4745c27d57450

  • SSDEEP

    3072:c+4E7NJPMdC3/22+rfKI81wWH+a96IFLFt7TOWadIViRarteXe:XG0/+zKI81FeG6IfvadIVpQe

Score
10/10
ratg2m3formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2m3

Decoy

stocktonfingerprinting.com

metaaiqr.com

junicy.com

libertymutualgrou.com

jklhs7gl.xyz

alex-covalcova.space

socialfiguild.com

drnicholasreid.com

androidappprogrammierie.com

relatingtohumans.com

jitsystems.com

gbwpmz.com

lesaventuresdecocomango.com

wu8ggqdv077p.xyz

autnvg.com

wghakt016.xyz

lagosian.store

hilldoor.com

oculos-ajustavel-br.xyz

nameniboothac.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_88036be677d6fb98059cc9f2e472a5058a341831142d12a1a75c76b148d56249
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections