General
-
Target
JaffaCakes118_7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5
-
Size
181KB
-
MD5
119703f77af17a44ce06028e63fb313c
-
SHA1
11048a3c116cdc21619a4e24c4e6ee30f7c2e25d
-
SHA256
7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5
-
SHA512
7bc0ab60c228ffadba404ae39274ff2790de8a6d61fe55b70b31521abd4c1583b2a06527b8591f18a2531389e7bd19ca48e83995ae326eda7e83f46e76c8ba7a
-
SSDEEP
3072:fzQ3OUuHZyo+Y8lSnvQcq4J1hKFL8YjU/56WUX6UlyUAI7EF:7Q1fsnvdz1IFL8YK56WUX6Ub
Malware Config
Extracted
formbook
4.1
nko
guttermuncher.com
funkuk.com
comeongetreal.com
karylwackerlinphotography.com
jowdykanefuneralhome.net
corinthia.media
matishub.com
cleanoralbr.com
worldstream.online
whitewatercabin.com
kennethjtackett.com
jiazhoulighting.net
franceconst.com
668ruby.com
josei.space
shaunmdurrantbooks.com
orlogik.com
myjpop.com
legend-producer.com
floridapsychiccenterllc.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5
Headers
Sections