General
-
Target
JaffaCakes118_160338b4497819ecd407f47fcf577f83dbaa6510d741753de456392f55b295a8
-
Size
18.3MB
-
MD5
f74d9737408c7069a661c77ab547bee2
-
SHA1
ebfbd571d4c97a8b20aa9f3bfd554ed2bb6afe41
-
SHA256
160338b4497819ecd407f47fcf577f83dbaa6510d741753de456392f55b295a8
-
SHA512
75201b1eb7b9e45f57c30867b3ae0ace2b028cc456445b7db2e422301529ac411b2c9d482e3ff7d3aaa1447956ee2d724a5b80ccb8877812326fe74cfa33fbbf
-
SSDEEP
3072:JUpjHFyzGxan+DpBlWZheIm/mq/hS/dCEDsIoHwT:moXGBlOhVq/hS/dCEYAT
Malware Config
Extracted
formbook
4.1
fqpo
skipthegames.website
patrimaca.com
rpgsymposium.com
amikonl.xyz
worldone.group
khayacoffee.com
51ula.com
janwillempustjens.com
myvirtualhealthpractice.com
sa2help.com
myvisitiq.com
successmakers.club
seven27media-affiliate.store
pgonline111.online
kaushalpatel.info
goodamericanllc.com
menuhaisan.com
clinicreceptiondesk.com
fifthaveclaim.services
8wl5j2.biz
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_160338b4497819ecd407f47fcf577f83dbaa6510d741753de456392f55b295a8
Headers
Sections