General
-
Target
JaffaCakes118_12459e37b2574cb60238afe5b0f849adeddd7433f122258223102b98c15752b7
-
Size
188KB
-
MD5
f4bcc930e3a99fe0653750429a4d4c32
-
SHA1
a721c72da57bca056ae6360a9697c4fe79676da0
-
SHA256
12459e37b2574cb60238afe5b0f849adeddd7433f122258223102b98c15752b7
-
SHA512
81a8984ae5e064f5a84cb0f67d775aed835cd734cf917e1ae4a2e3ad90d0d0756b2ab619e687dcc7593f3b856d7c247c0073e31368d1cbb11a514af4d779080e
-
SSDEEP
3072:9LdEuhq0cbs36kIAL9aJFRlNibY5jW1uvtiuELxNPmK+DrQruYw2:zUi61ABaJFR/EYZFtVGPOHY
Malware Config
Extracted
formbook
4.1
mr06
dreamrose.shop
bamdadlive.com
avastfr.com
aishabolduc.design
nobulldownhill.com
navis.store
paintingsantaclarita.com
wdidfhqo9751ds.link
epilateurlaser.info
expertdoctor.xyz
jtfaqyxo.work
zrexvita.live
coloradomarketingfirm.com
prestigehospitality.solutions
bmayple.com
sea-food.online
mejor-proteccion-es.click
tophatlimitless.buzz
inailshickorycreek.com
tintash-sg.net
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_12459e37b2574cb60238afe5b0f849adeddd7433f122258223102b98c15752b7
Headers
Sections