General
-
Target
JaffaCakes118_017428bdc03b413325fc0a2dbebce21428f7333c7b6e05f04d3f7a19e32586ec
-
Size
188KB
-
MD5
afb0a58268d7038b934360f0ec911002
-
SHA1
0ac1eb1ae0315a7834dc3e06e179880e3238173b
-
SHA256
017428bdc03b413325fc0a2dbebce21428f7333c7b6e05f04d3f7a19e32586ec
-
SHA512
6623ed4f15e77a209b1c4d7a2206bf2c24675c328c9f23569ff6886eb0171873f12907977084742f07bf20a08d0ad2147dd0b493a81eac131668a6ad23a1b45f
-
SSDEEP
3072:hQsUZFPwa9ZYAglWPdWrxSTx+hkrNFISHRbvG7HU2V+3/Ta6skTvV9C:h6VPFPdAwTxTrNFIcG70i+nskT9o
Malware Config
Extracted
formbook
4.1
nurs
caixinhascomcarinho.com
abinotools.com
oporto-tours.com
iruos.com
yesmamawinebar.com
wwwscu.com
habit2impact.com
antigenresearch.com
ux4space.com
diarypisces.com
cryptopers.com
lovingmoreband.com
beerwars.net
ascariproject.site
livesoccerhd.info
bluestardivingschool.com
pluik.com
snorrky.space
lcoi9.com
phantomxr.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_017428bdc03b413325fc0a2dbebce21428f7333c7b6e05f04d3f7a19e32586ec
Headers
Sections