General
-
Target
JaffaCakes118_50dcadbe8c9b041fd0b2184fa131b09c1067b10920352996d18629410d366b5f
-
Size
126KB
-
MD5
a467b86d264bbb25b65f493601d88516
-
SHA1
912a0ccdacbcffad6e9f4566d0e8af0655a5aaa7
-
SHA256
50dcadbe8c9b041fd0b2184fa131b09c1067b10920352996d18629410d366b5f
-
SHA512
023ae817a46751f97bd7c1b9b23ce53bea9d0af2e57bae70f38870cc0d2225347728549f7f1253a38660e72c3b1d5350b32a8bfd5e3daf51547359ac9e11fbe7
-
SSDEEP
3072:iVn4kCQF3zOYMEcIei+hvb/yBgnVaD/rOzCu4o:iHXOYMEcBhvb/+gnVaD/rho
Malware Config
Extracted
formbook
4.1
cb3b
lghglzcnkx.net
bellezaperfecta.company
thelisaiboldteam.com
newzdoozy.com
prospectsolucoes.com
altmartshop.com
webbresults.com
abnehmen-erfolgreich.net
tammygauthier.com
nelly-pasquier.com
footballrevolutionbyluna.com
primeassociatesca.com
lxzhub.net
jhaalz.com
fribetong.com
realkings.net
kamalameats.com
tyuyou.net
katiecorcoran.net
rigatoniscc.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_50dcadbe8c9b041fd0b2184fa131b09c1067b10920352996d18629410d366b5f
-
dump.exe
Headers
Sections