General
-
Target
JaffaCakes118_dab46d054f52cf185c9f458ca57cc159837f4333ba47d5bd81d975aa4754507a
-
Size
188KB
-
MD5
0d17a84f4a1151bca2ff1ece98bdd918
-
SHA1
4e55562b39a243ede4e65a4e9c1c4a701a4a7916
-
SHA256
dab46d054f52cf185c9f458ca57cc159837f4333ba47d5bd81d975aa4754507a
-
SHA512
154c0a4394a11fb0298502c95ac98a42983ffad8cd6838bb1530bbe0e6d3d8da594f5c27fcb65bb8b12be0a2006d714143c718811bcaff8406e593e4d6a32643
-
SSDEEP
3072:Ps7EwiREDw/H329O9LGn6T7CZinQOLebgi50jYzZ/Ipcr:1XX2c1+6T7CZBbgiC0zZ
Malware Config
Extracted
formbook
4.1
r31e
linlihua.com
facevital.site
xyhd004.com
indialearntodrive.com
treearm.com
dutlay.xyz
cn-weld.com
markyancura.com
onlinelipaugmentationus.com
patriotpresident.com
leizhh.xyz
ailoscartoes.com
oldfarmidahome.com
nbzqwl.com
lordofmoney008.xyz
royale-clash.xyz
joyfullsynergy.net
tuonkrex.com
stdccb.com
ligauspeha.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_dab46d054f52cf185c9f458ca57cc159837f4333ba47d5bd81d975aa4754507a
Headers
Sections