General
-
Target
JaffaCakes118_fbb31a11b57e6346ff1f441b71a3cee60a16082647573106c77befbadad88231
-
Size
188KB
-
MD5
741c0fc3383db91c5354e9bed4595f17
-
SHA1
763b14305d5d6673cc26776e547b30447b97ae4f
-
SHA256
fbb31a11b57e6346ff1f441b71a3cee60a16082647573106c77befbadad88231
-
SHA512
3e9abfff223711d0150b6f6f7fed32325de25d2a5285019b2c44eb0ff2dd6cead383ef7dbabcbc413f43c14334abc2fa6673470c33b3aad8b6f7e7566bd99bc1
-
SSDEEP
3072:peczkEMmrIfQke39hunl6QyjhxkinoNy7a4NUfblWwdGjjbeY1:pMCk49cl6QyjhxjoUW4NUjtYjbeY
Malware Config
Extracted
formbook
4.1
s43a
confermare-utilizzando-app.com
kayseriseramikkaplama.com
ayanfetechs.com
englishtheaterapeldoorn.com
haelthfitenss.com
drogonflyphd.com
sanmatipackers.com
earthcircusoahu.com
viajerohotel.com
donatepress.com
digitalnina.com
biovapour.com
cheepseller.com
superstyletrendline.com
beautyhairmagz.com
ichizen-fudousan.com
dgyuanchuang.com
noviwallet.club
rsvip54bcx.xyz
calculateyourpay.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_fbb31a11b57e6346ff1f441b71a3cee60a16082647573106c77befbadad88231
Headers
Sections