Overview

overview

10

Static

static

10

JaffaCakes...31.exe

windows7-x64

3

JaffaCakes...31.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8d38d6119e99aac3a8777420668b4e69d8ac03a9f3224207cf25e26e2cf7d731

  • Size

    188KB

  • MD5

    375d2d65a036c1b58acc30a58e68cfeb

  • SHA1

    9bf991f18e4d6fbdd9e8ddd63db2cd518d9bc756

  • SHA256

    8d38d6119e99aac3a8777420668b4e69d8ac03a9f3224207cf25e26e2cf7d731

  • SHA512

    cec15185d55258a324bc66ee0ca95c21d9d16f8a620f82350110b31a91ac8ccd671f274e785ccb83db81ce6db94372ac37dbb4dc602ab373e337f02230a08a1f

  • SSDEEP

    3072:dzs49sSRrwmpaBTqJW6sE4VHT6845/fwBziLPoYEswlYxpqJK/:dE+c6Yqfsru8U/o1EPoYNwlYZ

Score
10/10
ratfigcformbook

Malware Config

Extracted

Family

formbook

Campaign

figc

Decoy

47NW9KXrL+jgHgkaH/SBm7e9+eE=

ZiDP2+PQatbRpw==

McLVGasjijBUTSo=

7pCDHTcZBQCyFKFSb/4E

YwIKwvCFzlnbzcNqDNZ3WH77

yFJV/xjTQINSFzg=

HJb3EiH2afruNRSvM8UmOTJszaNv

vpTsJ8xRpExCgnlkzaoM

hUfQlYHe4Qb+DVchQM/mlOM2kjVisoJUMQ==

0URByQED2NCVrO2x5w==

0rjp8oD4ZRKfuI9GPlhwJA==

dxYJqqoonh7bHhMqMNIxXJnL5biDg2uv

N8ICb2IiuRdOx0dgucigiZ0DBA==

xmZ3s1jrZPStPdn5PlhwJA==

UxQyYwqi37V3q59to3PU5ZOZtoEGTcin

SpBGRe06ITs14S8=

spVKc4gldemrMNzf

6IBwrjx2XTs14S8=

FOp6CqjQtLdXT25kzaoM

P/O46RkpqQ8Uvw==

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_8d38d6119e99aac3a8777420668b4e69d8ac03a9f3224207cf25e26e2cf7d731
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections