General
-
Target
JaffaCakes118_bd7b7a94553e0d4d4a15164a2f400af9c3afa5fa16971ee81d4b92a58cbe1796
-
Size
188KB
-
MD5
9468549db004c24c6a3df72f004756b0
-
SHA1
e5a4a627c056c37c399178c8f8e8c24821045ac8
-
SHA256
bd7b7a94553e0d4d4a15164a2f400af9c3afa5fa16971ee81d4b92a58cbe1796
-
SHA512
7ace6fd87a73b4aa35a039226032e6b6ea91b41114daca2fe3ef1a30d7de8b9c4a1ae71314bd4d71770fe38e30e334f0a2f2d457abda1998f1121f433ad7e346
-
SSDEEP
3072:PAIpk37HLyNr32eGcFHAKzDePUdgr0aCAaTG3vUkGrNfp63:EcD2RcVAKzDePkgrgTW1Grj63
Malware Config
Extracted
formbook
4.1
j01s
designatoms.com
parthsamthaan.com
dstrainingacademy.net
udstores.com
kidstoysforsale.com
stellarau.net
hoteroticthreesome.com
ayurshaktiayurveda.com
ktsp.net
openroadtahoe.com
jzaq360.com
nyproperties.xyz
homesbyriordan.com
dxppppp.xyz
setfi.xyz
voyeaurweb.com
thirsttrap.quest
bestcheapdrones.com
centre-de-formation-cpf.com
dieterenland.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_bd7b7a94553e0d4d4a15164a2f400af9c3afa5fa16971ee81d4b92a58cbe1796
Headers
Sections