General
-
Target
JaffaCakes118_b377748157f830ac5592cf0ee7f047e907c509fd72a01631fbf0ac421d4763a7
-
Size
188KB
-
MD5
7f580a501360f1b9fd07610ad9298216
-
SHA1
6ec6b95acef2f329e5ff6252cedd3aafd5940964
-
SHA256
b377748157f830ac5592cf0ee7f047e907c509fd72a01631fbf0ac421d4763a7
-
SHA512
0e66a10a414d29237e8ceea4c8b9dbbab319d0d44f1b45de653f9fad5390b2befc8597dbcbac5d2214d25c881ae8eeeff4015fcd81fbb3735c249c2f0cae8bb6
-
SSDEEP
3072:w6LQnkvPuDwdNt3lmWiC96MFIbFteJKa1Ex3pHOhOQ7M:3Rhltp6MFII1e3tOx
Malware Config
Extracted
formbook
4.1
sh30
raptorwin.com
mmwavesolved.com
coachingwithcc.com
ssvminc.com
celdegobierno.info
wpaci.com
denison.top
fdsff.com
kelsapur.com
pontodeacucar.com
tgbamg.com
hkserver.xyz
muscatrfc.com
gylslgzn.com
roses-rouges.com
stanleymediaproductions.com
mintplatform.store
mentalallyhealth.com
lezfilm.com
lucarbo.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_b377748157f830ac5592cf0ee7f047e907c509fd72a01631fbf0ac421d4763a7
Headers
Sections