General
-
Target
JaffaCakes118_53ac73a1d8c481729d4c679600eea94c03a9405a221fa947e88e6a666f3a7ecd
-
Size
188KB
-
MD5
bd018a2ba5432cf9cc3266b80dc2bc09
-
SHA1
7ecd1feaa27080301229824cbccdf6f9efaf3a48
-
SHA256
53ac73a1d8c481729d4c679600eea94c03a9405a221fa947e88e6a666f3a7ecd
-
SHA512
dc3dfe1dbc50ea3b5e3d638c8f6fdd29777eb2cef523ab86a0a4457ac44252c0d8a7b47620b5f3f2e951b548e250bc0b3c4dcb3b081e7eb29375f5bebe74f579
-
SSDEEP
3072:DzyIkRtWh5NKx43Nm0Qr31OKUuBeyUwASQ2Dh9xIay4Dx5Yl0e:EWu2NDM3cKUuBepaV9xIay4Djwr
Malware Config
Extracted
formbook
4.1
b22l
tantpersuadechicken.com
zen-obia.com
gma-greatjones.com
qcwallpanels.com
tittialbrecht.com
vixenstaxis.com
1000daily.icu
nn66xx.com
basecoacheshelmets.com
stonecountrynightclub.com
coaching-dropshipping.com
herfabuloustravels.com
ropamayoristas.com
trulegends.com
bmw-x7.com
taichicode.com
shopchibidinos.com
adulttarget.com
freereign.xyz
aplusnotary.info
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_53ac73a1d8c481729d4c679600eea94c03a9405a221fa947e88e6a666f3a7ecd
Headers
Sections