Overview

overview

10

Static

static

10

JaffaCakes...4f.exe

windows7-x64

3

JaffaCakes...4f.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_cf620e668c4caf010dcb2938aef035babf759df1f29296defa0b0a468a5a194f

  • Size

    184KB

  • MD5

    c98edd9c30a3b9ea277debdf694eff75

  • SHA1

    b9f64b3dd40eecf64491367ca4fdc8eb1bc9e67a

  • SHA256

    cf620e668c4caf010dcb2938aef035babf759df1f29296defa0b0a468a5a194f

  • SHA512

    8a127224e8e4ddcf4e0b9cf53eccbdda1650124531411e7ee2b9d433d9759c0203ac663cb4cc90f6822df49cc12bdf55b64e6c1d4acad0ed777f46ee98b443b8

  • SSDEEP

    3072:Dt247PD9MhNDTtkuJLz1pWMpOIlg71kn4V8xSuktX880UukVpqRx6x1FYoCTQyO5:DEUD9MhNDBnP1dp6Bk4C5ktM80YVgqCK

Score
10/10
ratdcn0formbook

Malware Config

Extracted

Family

formbook

Campaign

dcn0

Decoy

ZVx68vDtAMBCwg==

oBMBvsNORkM/O/ox

Ff9pISWkm6eG4lByIspp

c2T42c6CIIF6B8xTxm9XzpVw

bvjhxRbnAC183w==

0lTttSNG4HUDNflyIspp

hPXFlstqiHA/O/ox

WLR+MeerxZ0cNn1ja+IQAYo=

IHRn4xXOVKi477zarG+ObSy7YJA=

Xhf3e+tdAC183w==

Xk0ZAezv2rWH

kngo+vBeSRN7AszNwam3Osmguuqc0MoC

a2Qp7a+E8fSw7LDjpnqEKjsRZA==

3zjy4E7+QM48wg==

YcCmqT3OUNAigVott2pBKiy7YJA=

4+SMeX1juat/5cZ1AZihcyy7YJA=

/+m7sro0OBTl3TMpCw==

i2ctEfe4//a64yklMsgS2J90

+loZ2QKGX0UWgpvErMs=

b9BNCnJWQJS8IfsR0uR3bCy7YJA=

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_cf620e668c4caf010dcb2938aef035babf759df1f29296defa0b0a468a5a194f
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections