General
-
Target
JaffaCakes118_5785c1b5403ce12a428084c54ed27d93b6c5c0bbd8f39035cb6bd384cbe00e8a
-
Size
188KB
-
MD5
fea7d887670af5c24abfd4854d12299e
-
SHA1
fc3fd2f35e74055bd93a3a1f31f86e96b534884e
-
SHA256
5785c1b5403ce12a428084c54ed27d93b6c5c0bbd8f39035cb6bd384cbe00e8a
-
SHA512
ea413d376336656c72d49fd751d0dba03be043f8fc3caf557129665efdbf4b9cbd0c599620333821335d815953d4d4734e9ee02337a42e9b8410d920482ebe2c
-
SSDEEP
3072:Q30vkDnhsCUJ3X6RxQwEqH66R9zwyNn9YlS4R1YkTy39quGR10+JEYTA:oy1XuF66R9zwPlPekW39qznJEO
Malware Config
Extracted
formbook
4.1
gr93
zts-ic.com
dtef.xyz
aloin.net
kellyblusbook.com
top500dao.com
zhanl116.xyz
trii-a.net
yakobylife.com
atomlook.info
yjswsd.com
global-ec-group.com
gazekb.sbs
jialiba.xyz
lovellsautoglass.com
generationsheating.net
beezr7fizghz3n39.xyz
nikkiaugust.info
ksjiea.com
hrbggames.com
tn8itwpe2hjrrfip.xyz
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_5785c1b5403ce12a428084c54ed27d93b6c5c0bbd8f39035cb6bd384cbe00e8a
Headers
Sections