General
-
Target
JaffaCakes118_22a9e3bacd5edadf3ed4c4a4b9a142e26ebe876158580ce12884914cc668bb2d
-
Size
188KB
-
MD5
ab3260221365513849c96b7d48fd02d6
-
SHA1
d0dd63bd9c93e50b7ce6fd8442ebc51fbcf5c15f
-
SHA256
22a9e3bacd5edadf3ed4c4a4b9a142e26ebe876158580ce12884914cc668bb2d
-
SHA512
f67f7072a189e8f7110c475d81bda8ae43b5f875935c8c585f4fec035fa77a9aea7e697e35fab5f886ffe063697ecd71bbaf9256bf93155207aa8167b273da04
-
SSDEEP
3072:ml2PUukhq840fWx3iucHVrqq6Ktf3uPAsRi9SxukuBoqZtAvgsHT:mpgftiLFqq6KNus9S4xsgsH
Malware Config
Extracted
formbook
4.1
v18s
elixirblog.com
foodweightedblanket.com
jillianjenna.com
dappsudhampur.com
pro-mesh.com
xn--wnu.xyz
americaniberians.com
simosimo09.com
abonnementenpause044.info
rentlakehome.com
orbeltheloanofficer.com
kuaileshen.com
ijoslca.com
honorsongs.net
templew.xyz
shmhz.com
airboat-alligator.site
lanearto.com
upscalekitchenbath.com
kumamoto0930.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_22a9e3bacd5edadf3ed4c4a4b9a142e26ebe876158580ce12884914cc668bb2d
Headers
Sections