Overview

overview

10

Static

static

10

JaffaCakes...92.exe

windows7-x64

3

JaffaCakes...92.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8cd54d41982cf727f9f89bde44054a45a90538107a771408ca9d1fbd7646b592

  • Size

    18.3MB

  • MD5

    9d82d3e27b8b539f5da120eac57ac2f6

  • SHA1

    eff493a7fc8131a752f6bb3a3893abe3baa7edd7

  • SHA256

    8cd54d41982cf727f9f89bde44054a45a90538107a771408ca9d1fbd7646b592

  • SHA512

    504434353fea0174f3bd2008f956f8c1515b72d0ed1f069a30a6ba7afa018048b0bbec3a795e7f036e0c8fa987c197c4c33324acfa701af02e4b23c76a3ee58a

  • SSDEEP

    6144:kqEUMaszE6wv+KktCg3w0mCkrxjnS3k1:kbUMaL2KktCggnxjnS0

Score
10/10
ratphy3formbook

Malware Config

Extracted

Family

formbook

Campaign

phy3

Decoy

Tvj0O75mlxE365S6gD6AG12Sxg==

wGIiVFyRiJ6S

F3YzekQVFUh2JYoRHAHdgrM=

g5TOA8yvh32nE9isZA==

bicunGFTpt9H+ZvC

U1Cf+cXTraPJ/suPvIGIbKo=

FkPeWTIX8j5hTzN+iCQ=

m2RFDgVOQLIFMg==

KgZfyJyEEUFqnKrOk5zdOA==

LeQYgP6chajMc+n8c0b96g6ZBhNo

/HUsLzwu3wotQjN+iCQ=

t/NivVTj8NEFLw==

SJMKaz8owPkVMw==

sQJcOF3pvm6S

Uwg6mnxjNzBekG4Yk5zdOA==

DL7ZTfGyFUmbkj4=

9oYt+QRTQLIFMg==

Y5cbS8iTPKL4LA==

E1gJevOmlMG5ofYOlf1A

fnS5/l0NeytjTjN+iCQ=

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_8cd54d41982cf727f9f89bde44054a45a90538107a771408ca9d1fbd7646b592
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections