Overview

overview

10

Static

static

10

JaffaCakes...29.exe

windows7-x64

3

JaffaCakes...29.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_73fa0aeae04e0fb12a553a0100ca0059c8d1e9e71946bb240deef1d39d757a29

  • Size

    188KB

  • MD5

    647a8b930ca25b4c46f50d7d4e8e6afd

  • SHA1

    2e74ba21b2fa760aebdfec28ca07e519c56fa804

  • SHA256

    73fa0aeae04e0fb12a553a0100ca0059c8d1e9e71946bb240deef1d39d757a29

  • SHA512

    11bcef47193fcd0225caf23fcae59ec9d5165f954476dae8ce62c633fb46156574e26cb929b83832f56882347cc4a6f29c293ec8e398249fd5b8deb25d3a69e3

  • SSDEEP

    3072:6gcaM/WjUFfHeX1NWBXRhSzvP6ASnjEyq6AhdZgVysRc1ewPwgJNe:6gg/WIBs1wBmiAe3qHdZgV8swPy

Score
10/10
ratmvugformbook

Malware Config

Extracted

Family

formbook

Campaign

mvug

Decoy

/sHUoDK/sSiH8PeSjHmG

GcPPpiKtqnL2DCNBjA==

jMe5r286DbCS

ROiVLeEs5qb9XZq1alCyD2IE

K8dr7A/knGS4LoTU2Xjl/X4=

llvcQXQ49ZoQKD5inw==

WF3tRgaGG/5j4Q==

jFMRBMpWakEol+M=

fQse6nD0CMsHK7LTp3Sh/krt1Z8M

t2MDewafggl60Jy6Ps//JQ==

95CbeRJb7/uV+A==

2Ys6wFDTrkQkSeIJ

FgAxFLULw3Orz5n+BdYGJw==

SPiK2+S4dEGR5A8lNMf0BHw=

+aHe4ooYD+YGElu1Ps//JQ==

cRgtNFFeVwTZP9tCl2uR

dAUr7QcUGeg8WNwOgg==

OI68ZxCRhQ6k0+9Olw==

btx0zNff4JRm6LjBC+kSQoga/xZbHLo=

yshNrLnBu2orWt1Cj3ab

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_73fa0aeae04e0fb12a553a0100ca0059c8d1e9e71946bb240deef1d39d757a29
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections