General
-
Target
JaffaCakes118_b4d5ce893681d69ab804bc9355551dbe6f4620ae49fbf5c3964a8a02508f85d1
-
Size
188KB
-
MD5
bc50be7f993a0dee4dcc2b32a46084ca
-
SHA1
6e080876943d11a11da62a29f08799d724781fa5
-
SHA256
b4d5ce893681d69ab804bc9355551dbe6f4620ae49fbf5c3964a8a02508f85d1
-
SHA512
77cdb0823d1af55c3b611631660973e5527157a069638fe65864bc76251fbad41f5585d0a4ce46d6a9bf10f46bc7944eb3adf4a1ffd592cb20b76abb6d30bb11
-
SSDEEP
3072:EuFLksPmIeHt3RyDAOvKl7ddVoct9tTDqP6koezEFX/4lSn:jkhRkAiKl7ddmcNqrhO/L
Malware Config
Extracted
formbook
4.1
s20a
kingdomscouncil.com
calavera.ink
99bds.com
newbetsites.com
foldandrelax.com
liumilac.com
hightidestattoo.com
hoschtonplumbers.com
deoranjewinter.com
awinterart.com
zmpeudz.icu
jsemw105.com
landrover-africa.com
371018.com
mhasale.com
philipmawford.com
acorn97.com
kexin158.com
dxhjtsq.com
lekarbg.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_b4d5ce893681d69ab804bc9355551dbe6f4620ae49fbf5c3964a8a02508f85d1
Headers
Sections