General

  • Target

    JaffaCakes118_6104ba18cba41bdd6508bff36b0b230d47a6fe5527fb10389c2a9de4b95f3112

  • Size

    179KB

  • MD5

    039220e0e6961a4d0dac63a4acdb4ce2

  • SHA1

    88d0832f458699db107eb6b54d96c7adf294b1c9

  • SHA256

    6104ba18cba41bdd6508bff36b0b230d47a6fe5527fb10389c2a9de4b95f3112

  • SHA512

    98c3fdd0a9f0b0d578d4bdba3b8da0a40da464f8b76432a9fef0fbae8cf46a0e2513afbb91dda21043108e29372dd51b6b3e3a474fc8f9a1e7ff17b35439bdbe

  • SSDEEP

    3072:OTncfnN+xcjA4nbg1LOaQVTacEcDsVvXawEVKidaV8+4Z6Bzr1qjHw:Oan7cwKLZQVWcDsVPsK2+Y6Bzy

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

bff

Decoy

vr-emlak.com

apexlimitmarketing.com

kirstenandsky.com

shimpoptical.com

2298555.com

chenguinan.com

putthroughhealth.com

newbiedesigner.com

rxbzx.com

baileybasham.com

douglasskirkley.com

kazarcabin.com

tuimixy.com

ruidaru.com

vaperztube.com

seosueaddg.party

q4f8i.info

zjgyijia.com

jaytonical.com

beashamedyouarenot.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6104ba18cba41bdd6508bff36b0b230d47a6fe5527fb10389c2a9de4b95f3112
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections