General
-
Target
JaffaCakes118_f8b7e9c81437b7a30cdf1c51bf4067bf6a8cbf6ef7c9744b05e1b2e51d5607f1
-
Size
188KB
-
MD5
e8feea71a60a210b5fc6de508ec2d3e3
-
SHA1
c092d134a6be37ec38bc433b4cf2751af70cb151
-
SHA256
f8b7e9c81437b7a30cdf1c51bf4067bf6a8cbf6ef7c9744b05e1b2e51d5607f1
-
SHA512
99c3e870c5ab833ed0e8550f33abfc22d752672690c7a1638aa4dd33ba0d49ddc18c7da71575509516e83048e057a4a0e25097813b1091b04419a9f70fa194c8
-
SSDEEP
3072:K+mWkkDyfc8UVdmLj32Vg+Utx7LzBFKpl7ASmt0Mm6SvKeuE2i8ZeWZ2DYBs:KvB8QL2O+W7nBFKT60xy5ZF9
Malware Config
Extracted
formbook
4.1
os56
australianhotwaterupgrades.com
vipidplus.online
kneescooterscanada.com
pesanterkini.com
madden24gameplay.com
linkbong88moinhat.net
awongtest41saletest.com
thetravellingcatcompany.com
vazxlip.xyz
bangdemcheeks.com
passengerassistance.website
cloud4global.com
prestopizzarennes.com
midlandchambertravel.com
nashwan-d.com
bellescraftkitchen.com
teamtisdale.com
allascooussaa.us
cryptobet365.xyz
cbij.education
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_f8b7e9c81437b7a30cdf1c51bf4067bf6a8cbf6ef7c9744b05e1b2e51d5607f1
Headers
Sections