General
-
Target
JaffaCakes118_732fbd4bf8c54b4fda07b435a77fb83d7ed8e4c760358591414872b60d5d28d3
-
Size
188KB
-
MD5
295aba147739aeb313c2f44a8f8b00c8
-
SHA1
ea381bd4a8ce8bb1bbfd4acbf8aa936baf04c8b6
-
SHA256
732fbd4bf8c54b4fda07b435a77fb83d7ed8e4c760358591414872b60d5d28d3
-
SHA512
f3c7a6a3a1d9e494288924fa8c9aa3acbe633a9bdffab753d0aaacfc4d9e2545c320f5b981e3f2e6029a92cdcc6926974f474bb1e203312ca378945e63e502c9
-
SSDEEP
3072:XyhEuzyACUz383Z5eLmdt6l1Mvme5M9eSM1JsaoWbcmq6iR:AHb8pkLmdtxvmeK8S8yRWcmq6i
Malware Config
Extracted
formbook
4.1
s1k3
magnumairways.com
solesmeasure.com
cryptogoldnugget.com
drescarrentalandtours.com
home0717.com
glolook.com
scriveriuspublishing.com
mysterybox.ltd
outdoorstoic.com
getmyhomeprice2day.com
khalilstylinghair.com
nedataflex.com
li-nao.com
huanansanxiao.com
nvadb.com
histreetadvisory.com
gohomerajapaksas.com
ditocco.net
717913.com
extra-hospitalier.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_732fbd4bf8c54b4fda07b435a77fb83d7ed8e4c760358591414872b60d5d28d3
Headers
Sections