Overview

overview

10

Static

static

10

JaffaCakes...99.exe

windows7-x64

3

JaffaCakes...99.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b024af2cad7482a610ed2798a474ba9db7bda098e05d99267e8acf32d7087799

  • Size

    188KB

  • MD5

    ef514e450166c02df9cf86203fb0249d

  • SHA1

    db6eec24e26840d58e190d32e385ae893e55ac13

  • SHA256

    b024af2cad7482a610ed2798a474ba9db7bda098e05d99267e8acf32d7087799

  • SHA512

    2beedec005af51254cf4c5ac9236cf1cea723cb0b7814819e17eb1867c34297f24bdfdd225cafa260f732b9387cc193df8cab8a0fe06dbcee92a69fcdaf69c08

  • SSDEEP

    3072:so6WmmWlrgdNWr41Sq4l6AGyjoILQuEI+vFhZ9XHefIZNJzFUjHgl3W5sswMCQ:RmmS0d24goALEILQbI+vFh3+0xGHk29R

Score
10/10
ratxrobformbook

Malware Config

Extracted

Family

formbook

Campaign

xrob

Decoy

dV8FCtdWdnfMJ9thh8l/

IJG6Bh4iMeHVBHNp2MrpTA==

NhPKKtmQxnHYF/80

f4M2RhGEf3Ot13+qLrKqxb9f3dXj9Q==

A/689/MibSRBgkPkx07m+H+g

e8OOkUu9y/uYCMsdrR3s0mODmGw3d8t9Og==

gLN5bn+Zq1VQXmOOvw==

NFcQGvViY5sxmkty83Fde4GQhg==

XWMfFSM3f7GT9w==

Ih6vvqf9R8gDObM=

FGAlLASHlpLaUUKUJIwm9ABQ2Js=

v8R615LDC8iWchwv

m+u3rLUxScgDObM=

jc3eahERf7GT9w==

TYNBVDadkpTF76HeNl/rbwWtLSbyPzM=

j6NQmhWeOi2B

aqJocUfM3v97ryScY6EiSMbVyBak

V7nYOyEZKa2J/KKh5RMhJrbyK/eC/Q==

8zPsAt3ejcgDObM=

Rpe+BrGBzpGa9q8FHKpi

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_b024af2cad7482a610ed2798a474ba9db7bda098e05d99267e8acf32d7087799
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections