General
-
Target
JaffaCakes118_0d02cf480fe3cee2a429db1c78512fce985efb9ff4a0223f4c5c0cd1f09d53c8
-
Size
188KB
-
MD5
f3ca7f25f107a5a63c274486ec232e04
-
SHA1
9e8579cd4264b96565f62bdfa322ec2e728658d1
-
SHA256
0d02cf480fe3cee2a429db1c78512fce985efb9ff4a0223f4c5c0cd1f09d53c8
-
SHA512
ab624b173685e2a226292bdf8280171007626deb450244e6d9c57a16341058acb2d9cf3f07f8bea372a1df0b8209ee18246f972214e75948597440db85126d18
-
SSDEEP
3072:c+4E7NJPMdC3/22+rfKI81wWn+a96IFLFt7TOWadIViRarteXe:XG0/+zKI81F+G6IfvadIVpQe
Malware Config
Extracted
formbook
4.1
g2m3
stocktonfingerprinting.com
metaaiqr.com
junicy.com
libertymutualgrou.com
jklhs7gl.xyz
alex-covalcova.space
socialfiguild.com
drnicholasreid.com
androidappprogrammierie.com
relatingtohumans.com
jitsystems.com
gbwpmz.com
lesaventuresdecocomango.com
wu8ggqdv077p.xyz
autnvg.com
wghakt016.xyz
lagosian.store
hilldoor.com
oculos-ajustavel-br.xyz
nameniboothac.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_0d02cf480fe3cee2a429db1c78512fce985efb9ff4a0223f4c5c0cd1f09d53c8
Headers
Sections