Overview

overview

10

Static

static

10

JaffaCakes...c2.exe

windows7-x64

3

JaffaCakes...c2.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_c51850848f62df86d5fe232091d3eacfeafbb26d239fcc12a1f5ae78edefd3c2

  • Size

    188KB

  • MD5

    cb41dec8183c13ab50ca61e49bdbf8c1

  • SHA1

    9ef3ef5b863b7a6b8b36cab5e32d8d456baf15c3

  • SHA256

    c51850848f62df86d5fe232091d3eacfeafbb26d239fcc12a1f5ae78edefd3c2

  • SHA512

    25e8c62393a806d53052067e9603b9009cd9ae8169888dd0d75cf1e136e5ea40750cd818fc8e3c9d00b7fc316dec69392a68e93d584264b460d215edb72dc484

  • SSDEEP

    3072:F6+JyTJ0m0QyNW46ByAShxjPQayfIgx/oX+/9CKWTqFzIk56jsS0vX9:uTyxQyl6chVPCAgxAX+8qFzIse0

Score
10/10
ratpregformbook

Malware Config

Extracted

Family

formbook

Campaign

preg

Decoy

YQCPgnxx6HBhPiT6uw==

8REciFqdMX7R5w==

O8wyWajpLMIX6Q2S/21sq/o=

3GXNrIgNmlObjIIGuhZ+kw==

BNEACgqQ/kwTwnQ97wp8

1iPJ9NoRZui8dxXsGiGgtiKm5EBF

7fE+qyyRjM0xI2w57G1sq/o=

Zu2X8/hs2SRfcf7YFxGAnMc5pAHv1eMV/g==

ztcaMDhlkRRkdbN4hU10

TGtlil/QVBiSjXA86j6FwyKm5EBF

6L36c2GmCcUuNwukPIis/B5hmA==

rcvJ8uJq+LkO9eFk7XVdeeM=

1sHrTcABMK2RUAm4uhZ+kw==

23v6I2/Mz6d9EMO0LCptqvg=

PUMrD5rJdHRW++q1eM4VOXXz5Zg=

/k/fCu41mwg2oteuuhZ+kw==

1HUfjg96kagJ3B7opQ==

rWuaAc8M4E6jjPrH7eg1qvIM

JaUXFRU4DFKvmwjDgUlviekd

xxe35zKiltol+EYTW21sq/o=

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_c51850848f62df86d5fe232091d3eacfeafbb26d239fcc12a1f5ae78edefd3c2
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections