General
-
Target
JaffaCakes118_c0ed3b834f37b3354b795a2b74ab2f88ba261a8003b71e9930dea98c17ea6548
-
Size
126KB
-
MD5
12f7f2bfafb99d0ae771f9f7f96e583e
-
SHA1
46e36067160056a88b6b77d69c2a0bd84f64f881
-
SHA256
c0ed3b834f37b3354b795a2b74ab2f88ba261a8003b71e9930dea98c17ea6548
-
SHA512
0ea76ad83d73dd6423277dda80ed00ebbcb97a5b9034a566704b479d5f1fffedfcf08e9344bcf125c27864f5b4d2f3025999626b29bee7b02132b6409fabc44d
-
SSDEEP
1536:Q05trhPvxKhfwRgqdzECwEl550lDBPc3fqwstMC+PFCsfgE+WN7hZ9grQHdaE1Og:fLrhPA67XwxOOMPPd7pgwTbHgGmtt0T
Malware Config
Extracted
formbook
4.1
pjt2
bankruptcyhelpflorida.com
yourpropertymanager.info
inevitablebites.com
liviabelezaa.com
bartonhuxley.com
headhuntersmc.com
karoshejeans.com
trevorrentals.com
overseas-assets.com
zpchanglong.com
bconomic.com
devilishweb.com
eagleusacoffee.com
thirdpartyinc.com
newyorktowservice.com
barbrs.info
digiceuticalindia.com
ftytqwfl.icu
cabinetinfirmiergomes.com
waystoconserveelectricity.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_c0ed3b834f37b3354b795a2b74ab2f88ba261a8003b71e9930dea98c17ea6548
-
dump.bin
Headers
Sections