Overview

overview

10

Static

static

10

JaffaCakes...f5.exe

windows7-x64

3

JaffaCakes...f5.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a443c432bf2adbbc7d0ce3268dabefebc97af3e4d742adffbcb7a22963e333f5

  • Size

    188KB

  • MD5

    ce759ea56d020816c15196cf9fbf7bcb

  • SHA1

    9f82359cd99e0343e16947b77d6d0625ce2507fe

  • SHA256

    a443c432bf2adbbc7d0ce3268dabefebc97af3e4d742adffbcb7a22963e333f5

  • SHA512

    5f5a14fd8c00642578cd2201b05bed54beb9a76658d9c9851c9093334c0f1a9844fbbab00fdbe78283648a7971434c0e157ed1996ef1a1c32f11af81449fb308

  • SSDEEP

    3072:Zo6WmmWlrgdNWr41Sq4l6AGyjoILQuEI+vFhZ9KHefIZNJzFUjHgl3W5sswMCQ:8mmS0d24goALEILQbI+vFhq+0xGHk29R

Score
10/10
ratxrobformbook

Malware Config

Extracted

Family

formbook

Campaign

xrob

Decoy

dV8FCtdWdnfMJ9thh8l/

IJG6Bh4iMeHVBHNp2MrpTA==

NhPKKtmQxnHYF/80

f4M2RhGEf3Ot13+qLrKqxb9f3dXj9Q==

A/689/MibSRBgkPkx07m+H+g

e8OOkUu9y/uYCMsdrR3s0mODmGw3d8t9Og==

gLN5bn+Zq1VQXmOOvw==

NFcQGvViY5sxmkty83Fde4GQhg==

XWMfFSM3f7GT9w==

Ih6vvqf9R8gDObM=

FGAlLASHlpLaUUKUJIwm9ABQ2Js=

v8R615LDC8iWchwv

m+u3rLUxScgDObM=

jc3eahERf7GT9w==

TYNBVDadkpTF76HeNl/rbwWtLSbyPzM=

j6NQmhWeOi2B

aqJocUfM3v97ryScY6EiSMbVyBak

V7nYOyEZKa2J/KKh5RMhJrbyK/eC/Q==

8zPsAt3ejcgDObM=

Rpe+BrGBzpGa9q8FHKpi

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_a443c432bf2adbbc7d0ce3268dabefebc97af3e4d742adffbcb7a22963e333f5
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections