General
-
Target
JaffaCakes118_e2ea8a2661c26d04b6d2c6aae48916ef5d5f5e627cc46e763c766c81ad3f5ee6
-
Size
188KB
-
MD5
4458c25ecb86a974e96aeb74036d15ca
-
SHA1
862de6c03ac68c47b0a5e8cf31e53744a3a902a8
-
SHA256
e2ea8a2661c26d04b6d2c6aae48916ef5d5f5e627cc46e763c766c81ad3f5ee6
-
SHA512
19446c4ba2d5e31d73fd6ae1080ab154c441366d1e65582bf8b0a796d29a2935c16f18c4b6f52efb72c324e4260649c7610a22e9a290a0ce2206442946f43e0d
-
SSDEEP
3072:yLcEu0HNdOMU3AlIhanjr1B6hUVHvCtfkgjBCa1ci9LKeA:t0t6AlEanjr36hUVHvCqIAsxKe
Malware Config
Extracted
formbook
4.1
dy39
cantiinc.com
unamasshinpi.xyz
morehouseman.info
hexem.tech
eliteglom.com
thegoddardhouse.com
yosef10m.com
dazzleblogs.com
nostalgic.ventures
pricemyhomegta.com
okr-solar.com
matchingpro.xyz
decode.salon
sabicircle.com
bambaway.com
amadesigns.net
gowellhealthspa.com
viagogos.com
humafoundation.com
straingebeastwithin.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_e2ea8a2661c26d04b6d2c6aae48916ef5d5f5e627cc46e763c766c81ad3f5ee6
Headers
Sections