General
-
Target
JaffaCakes118_239962bbab61d5afb09c5485a0a6ae9ec37321afda2c1606036397a111fb0dac
-
Size
167KB
-
MD5
8652c3412eadd7316890ced3a52e3dc7
-
SHA1
807076908f722426c0f97ce4e57f84db81d43dc9
-
SHA256
239962bbab61d5afb09c5485a0a6ae9ec37321afda2c1606036397a111fb0dac
-
SHA512
f446d77bc93eb5a4317e477e692ad19195d59c7781d01dfa95acf9b3e0515977b3932739b2d5a96f600b53416dd1fb84f834e56c5dc9ab998841ebdac432e805
-
SSDEEP
3072:MLexixufPPnwGq71CWzrcGG7rzsBLVYIAo4/hQ7tHJhor:pRnACU4zsBLVYIAo4G5Jh
Malware Config
Extracted
formbook
3.9
jb9
cloud-medical.com
maximtech-bd.com
3d-sprint.com
624vhw.info
nexdesk.net
flxcustomsigns.com
gvuzejobxa.info
xiaobaokm.com
565mt.com
servicioscuery.com
500360.biz
stephanieshermanart.com
boozebird.com
merckcousa.com
frenchkissldn.com
lucyfaulknerllc.com
egekartus.com
bookyabber.com
cardiacimaginginpractice.com
deucessound.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_239962bbab61d5afb09c5485a0a6ae9ec37321afda2c1606036397a111fb0dac
Headers
Sections