Overview

overview

10

Static

static

10

JaffaCakes...22.exe

windows7-x64

3

JaffaCakes...22.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f45ecec0f924d587835636ea0e782bfd150eaf08a7c57e8006cd4168dd3a0622

  • Size

    188KB

  • MD5

    73578078a590b3c29ebb2a7075c1ee1c

  • SHA1

    d518187f84e13e5d114c4721d5353cd314b1e281

  • SHA256

    f45ecec0f924d587835636ea0e782bfd150eaf08a7c57e8006cd4168dd3a0622

  • SHA512

    c112f97d1560e1da362e71df5381e8f0abc7461a1c17164276de4339873d7911c186de76daa5f3f9eae1b8086dbe96b5d246b09daddca0560900978c464d8e51

  • SSDEEP

    3072:wowI5davJ/ZF5TA/d6sWBdoHjzDIU+iNLXr6e96fe2HJAdPJJpxr0oS1:rTdWbk6zAXI9iVX+k6feeJ4PnppQ

Score
10/10
ratcodpformbook

Malware Config

Extracted

Family

formbook

Campaign

codp

Decoy

WLwbp9IgDF0DRbuq

oNQ7DHBzVHVMTxxxFCORk65Z5w==

eKyDm2P0S8i8tXrGSRxyN/GB+g==

DWLDupksnDvfKi7Q7PI=

JAaYbOFx1G0f4pcM36gDB3YaG796

KWQ71Z4U7+2Nv8K72OXED5M9oe8=

YJpvEHW5TU/wL02R9TiN0A==

tpQX78fPprFMi7ocSgXfUNYKpTq33Icp

a9Z0eju3FKFA/YBy+MQfG3QaG796

uQzt58fSssDUenxacQCY2g==

vijGzYPYOfi2gxZLhlbA

kZfzlQg7IGPxc29BJA==

dcQu+blQlxGyZu7qw5P4L6s=

TTIXAcXMr85yqqvxWBMqdrw=

xZb/tyGC8sOjIS7Q7PI=

KnzenvO+cXkVS3biKfRDwJ9Q5Q==

ZqZvDt9+yYxqh1Si

vZD8CtVZigY/cqnmLA==

QJy2dd/p0MO1Ji7Q7PI=

l+Hmoea3jsiAcqnmLA==

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_f45ecec0f924d587835636ea0e782bfd150eaf08a7c57e8006cd4168dd3a0622
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections