General
-
Target
JaffaCakes118_603db960297752366f25c500d4d43b425341864f49fcdac20768a4cbbc53df26
-
Size
182KB
-
MD5
43e3a8b914387e3c5ef5d4f25c038ba0
-
SHA1
e8a26772cd08a8d6bec57b49cdb4f9fc9e5db51a
-
SHA256
603db960297752366f25c500d4d43b425341864f49fcdac20768a4cbbc53df26
-
SHA512
1e2814bf8e17fbbd0508ab3405ad1a068f102461963d2a43fbfb2c4c6054b72e580eef1c19e7d350f1945a9d14d25a53b08a173960d8291bb910081b7098fe0b
-
SSDEEP
3072:O/20g2x7EunTummbWHzk6K4X6bgyGr9v5Y03mWQFr6b7DejZ5U6c:qBhKmmKw6bX6bghrfe/Foy9q9
Malware Config
Extracted
formbook
4.1
ot8m
digiclan.net
songlautramtuoii.online
miracleseedproducts.com
taniacastillo.com
essentialme.network
charmcitydetour.com
suprekopis.com
jimmycollier.com
thrifteee.com
rhmachinery.ltd
the05project.com
altfacebookalt.com
ein-herz-fuer-holz.com
kingohost.com
vmarines.com
2bestudio.com
triducdv.com
kp-transport.com
mybostonhwart.com
benzcat.net
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_603db960297752366f25c500d4d43b425341864f49fcdac20768a4cbbc53df26
Headers
Sections