Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...31.exe

windows7-x64

1

JaffaCakes...31.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_93de7821275cb17561e0235d0db9f107ce92af07d2e7562f90e6e63ca2664d31

  • Size

    188KB

  • MD5

    8653d0122651c2845706ceac9f426cac

  • SHA1

    bcc2d6388745914dd74ed555510b42e84c1a7fa5

  • SHA256

    93de7821275cb17561e0235d0db9f107ce92af07d2e7562f90e6e63ca2664d31

  • SHA512

    10450674d9495576de4f01010b462f9f1aab6c0fac8867a3b3c28bacf9b9c7640f1d8f9f02c2dd32854ca9055e9bfaf4790cadfd5b0c37cadceaa5ebdd12f24d

  • SSDEEP

    3072:FmJVE7PaUwdzrD3IAyd7aHKLfgWjZqb6pNkBBbFEZ7uRxM63Mi1Lj6Bc:Ioa1rIzZeKLfgWjZ6MNkBi7uxakLO

Score
10/10
ratxp73formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

xp73

Decoy

boogeymanperformnce.com

mytesttools.com

flawlesseventplanner.com

whostoknow.com

act8team.com

consistentdaily.com

bietthushantira-hoian.com

escolhacertadesigner.com

coachedh.com

culiri.com

thecableone.com

djpoop.com

nasipkepenk.com

c-performics.com

mermaidsanctuarymassage.com

directionsrilanka.com

crazylazypets.com

athenapublishingllc.com

dominiqueglenn.com

tdcldeal.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_93de7821275cb17561e0235d0db9f107ce92af07d2e7562f90e6e63ca2664d31
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections