General
-
Target
JaffaCakes118_01f5bfd4e5fed94f8d8cce21988bfd2ac79476544729d53fbca5d455fd5d1c18
-
Size
188KB
-
MD5
20aab2758a1d4dc12f92c7838f3f58e7
-
SHA1
318160c6ef95e02ecc95fc552e0577aa8b7bfa88
-
SHA256
01f5bfd4e5fed94f8d8cce21988bfd2ac79476544729d53fbca5d455fd5d1c18
-
SHA512
544422c395fb11bdcda8f44fd86b1b74c298583111f6c2051bea13dcf0bed1d09fe5c41644f450e330c36dde673d108e816a7e0cfdfc02fc7b8077f9b43f7817
-
SSDEEP
3072:w9BEg4TBXsJ39UqW+uCr3JqTNTdC5FfZR6Cz252xpDI504A:CD19flXr3JqTC57/z252rMvA
Malware Config
Extracted
formbook
4.1
ah6m
saudeybeleza.com
ethereumtiger.business
thesoupproject.net
cedarwoodtownhomesnp.com
gyascool.com
gosourcecap.com
womeninnetworking.net
nahade-gostar.com
dcman900.com
mirrorparcel.com
lamowlettu.xyz
glencoreprocurement.com
codsini.com
thripear.space
movierepository.com
51cdfang.com
hananiabeauty.store
mortgagemanuas.com
remotingpeople.com
myimpressivefashion.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_01f5bfd4e5fed94f8d8cce21988bfd2ac79476544729d53fbca5d455fd5d1c18
Headers
Sections