General

  • Target

    JaffaCakes118_c19bd3337bfc2b64276185f454c5190a8d75c59fbae63438890936e388cd29dd

  • Size

    188KB

  • MD5

    0048624e8a0e396c2e9135989f1abafe

  • SHA1

    67050ebbdce1ba67faff1cfe6ab01f3f051b34e6

  • SHA256

    c19bd3337bfc2b64276185f454c5190a8d75c59fbae63438890936e388cd29dd

  • SHA512

    2ffc78d9887dbc77c642d591cb61f06af7977b5e36d97e1249523abefe20ce8c3fe6b003c5032f7281cb23a692f862e94734611bd8a74233b11bdf274c7cfa9e

  • SSDEEP

    3072:3lwGEd7kGGWlTeE3l6Ls8t6eEqbVrO3EL8txGIh9u7rs+jJvS5Mv8UmN+Gva:IpRlMh6eJbFoSIQs+jZS54A+GS

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

sy01

Decoy

aeria.life

jotted.community

mozarspalace.com

bfkoxoih.work

doganmuzik.com

ljsq.shop

vitalitycook.store

74574575.xyz

infiniteuniverse.site

storkrv.com

amendmentsymmetrical.top

adevodigital.com

renammsac.com

tptretry.info

ninfainacquerello.com

25038.top

httpsthothub.lol

yvxbt.com

72028.top

vzxtopi.xyz

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_c19bd3337bfc2b64276185f454c5190a8d75c59fbae63438890936e388cd29dd
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections