General

  • Target

    JaffaCakes118_8b630a07dba9cb4642bd2f00df8ba1b7b87765b3cdb12a630754639c9fdcf10b

  • Size

    184KB

  • MD5

    67a1da2c7854558e397638fb82678e74

  • SHA1

    e1cef58deced2866243cfc5e25508bf81447fe12

  • SHA256

    8b630a07dba9cb4642bd2f00df8ba1b7b87765b3cdb12a630754639c9fdcf10b

  • SHA512

    c13eb2520865b2f9e9d6ea32da4b5b2ee87d46c5259ac717d70e5abd1eaa9a17449be83cf1731877411d11ec781960bee8f8c5d6eb5cc24cae07ea2f09b8dd9d

  • SSDEEP

    3072:bnlykbBGi17gti9bhTJW+44TEICduP0YuLoJLk/Fpy9jXRW5+TY36F:7Rbt1s8hT/KfdKNsoJLk/FAJXo8TY36F

Score
10/10

Malware Config

Extracted

Family

formbook

Campaign

u6hu

Decoy

OvIuZKrtOMxghbaZbvb/8h9g+Q==

mjHLVEVO8gwVeZ+7

Lh1lcZzH8pTXgpdDzV0vzyVooAsviHQ=

OzJXhMQYaQKNT1aBY/gM8h9g+Q==

WSJFbX28mK+jXVvRJofdtSc=

mEv6JdT2o7Nq++XYt8MFpx5QrhRdhA==

Wxf/NnjMRlBj6JK3jg==

nB21Q0tg7gEVeZ+7

IZinOswGUPAn51eHvCAoMetC

INxV9PYg7AQP0xyDAyg=

kkZP+Iq1AgMVeZ+7

meuru6sSaxxuoLS7gA==

y0jMTFyffedqCSRXVfm/

sJbTfRVKuQScxw==

+ecHP3ayIjYFnb7j2Pt6z5dK

uZnHRwRE9QwVeZ+7

ZBg6Sy054P4oHp0DknCx

nFXn8j4yTuJ9aOfNlw==

35ygHt8uASpReRyDAyg=

8nT3T+8eWeh6aOfNlw==

Signatures

  • Formbook family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_8b630a07dba9cb4642bd2f00df8ba1b7b87765b3cdb12a630754639c9fdcf10b
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections