Overview

overview

10

Static

static

10

JaffaCakes...4d.exe

windows7-x64

1

JaffaCakes...4d.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3ad9c4cadd6124a50a386a615e31e7c1bffd069026e298f4dd611622946de74d

  • Size

    188KB

  • MD5

    f573e61f7104f403780b992404e69470

  • SHA1

    e0e81995735b2760c9aefc56eb32e65ee799f057

  • SHA256

    3ad9c4cadd6124a50a386a615e31e7c1bffd069026e298f4dd611622946de74d

  • SHA512

    c64d8ad17f1bd0fdb9b69efebf73e38a7ab04ab4a0b09b572715287dac388c73472f9baab07d646cd57aa236a65799e3c9abc43e0ba25f44f457f239c0d28f5d

  • SSDEEP

    3072:r0z8k2ga0dqI3DiUGCajZxPUTY9yfjALBns2geo0d+br:PnGD7XatxPUTRem2r

Score
10/10
ratpd21formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

pd21

Decoy

engineerdanish.com

plgscholarship.com

mekpaulcreations.com

alquitodoeventos.com

monaco-life-tv.com

donisetiawan.com

intheoryes.com

lisabargman.com

yourearlybirdpasses.com

mknshops.com

overthetopmarketing.info

massagechairdeas.com

welldoneschool.site

fulgentgeneticss.com

faithfulgutters.com

theessentialnotary.info

scrubsbymanda.com

bootcamp-institute.com

ammescore.com

fashiontenor.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_3ad9c4cadd6124a50a386a615e31e7c1bffd069026e298f4dd611622946de74d
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections