General
-
Target
JaffaCakes118_f5ad2816d3aceededccc15798d6c2837f4a747c19e823f505058dd171c01ad6a
-
Size
192KB
-
MD5
8c3c643b8de7fc42052e0141026d80c6
-
SHA1
db7db0ddf210f93c7bbb5f70c4fd9ecbaf3d6626
-
SHA256
f5ad2816d3aceededccc15798d6c2837f4a747c19e823f505058dd171c01ad6a
-
SHA512
a5fe0c840486bf718a6dbb006060af354f616c4419abd3049ea9033d4ca169803d0164ead295313ba57268eeadc6ef673c90363543885452d43e061034d119b6
-
SSDEEP
3072:yzXzkZux/FOQa3gZBih413qz7Rs9atOXLVpz4elw5n2YxY5CN+:PczcgHYk3qz7RgatWLP4eQCe
Malware Config
Extracted
formbook
4.1
g48s
ncdiag.net
5minuteremarkablemakeover.com
caribbeanoyr.com
haoyundaojia.com
hillcrestmidmod.com
luxurion.net
tomfordworld.com
colaborem.com
744456.com
rocketsolutions.info
dlzhh.xyz
eaglelakenews.com
uxrbxr.site
nikatai.com
cyberspacewar.com
dandion.online
kondakowa.com
caitlinmcelroy.art
atrisits.com
spectracorpcompany.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_f5ad2816d3aceededccc15798d6c2837f4a747c19e823f505058dd171c01ad6a
Headers
Sections