Overview

overview

10

Static

static

10

JaffaCakes...ac.exe

windows7-x64

3

JaffaCakes...ac.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_2171684cb9f60f0858401bb0d3d8340f0fe073cea7b5f0232b27c6f75eeb4fac

  • Size

    188KB

  • MD5

    a80e6b7bb0d7b4696e51f2005a2c62b1

  • SHA1

    59089cfb161a1fe18e929720444700e0d34d9bdb

  • SHA256

    2171684cb9f60f0858401bb0d3d8340f0fe073cea7b5f0232b27c6f75eeb4fac

  • SHA512

    adddb0bae68614a025e93106e18ee5596d1e54527281f0a8af32ee50d8b2a68a9596d7609c84194ea3700a0ba5a5bbab91d9f224e14468a0f3eb4d5790ae589e

  • SSDEEP

    3072:ayrVpyYEe7wAwRArHAWhNr7fjnPry4tc06mOvAaPVZuU7VIIuL/DpBK7T4X:aKIYE11OHTNLPrByJmOvAOlzuL/DpyMX

Score
10/10
ratdocvformbook

Malware Config

Extracted

Family

formbook

Campaign

docv

Decoy

U9joSV3jrRWaOFCKHlsP

BWItfadLRNElFi4n

IwwjhJWT8tzs4sQ=

7tvFIDbQqJsB8URT3RNGkHw0QXo=

ohLOMk4YxjHG

wjIBSnU4DBGp3GdYKmuj7hCEXOBwqzs=

a1qxDSU3hjufvj0bpfj3Uw==

XDxmge0LinYBHuU1BB9RlHw0QXo=

gHy8MUUvfjseUDH/laNRskjL4+2cpSo=

3l5awfWzfpndFbQgLGcH

fQQagL/xa+cEOBpiaroqcP7Y

ta//E0xm3pTAt2qKHlsP

pP25BCAYTnWdQthIEXHXVg==

RUBcttrfWDZ9lpnxt3A8TufQ

No5nx99vdhKVHHLdleEocH4=

pIWF4DJQ1eEOwkulerNvszfXpyrm

1jawFSSZXBRymxFLEXHXVg==

C2wAUJqBPs4kBFikbplAlCrTqy/s

6z/BJ3Ia48YuUz5+NTE8TufQ

rn97xOf1iIWrCZjj8A==

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_2171684cb9f60f0858401bb0d3d8340f0fe073cea7b5f0232b27c6f75eeb4fac
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections