Overview

overview

10

Static

static

10

JaffaCakes...39.exe

windows7-x64

3

JaffaCakes...39.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a2c46d148e450c19c08f9539f58f4cebd5715b7bf8489cdf02aeeede8514a439

  • Size

    188KB

  • MD5

    03fc9d744d82330daa9a9c253b7db23f

  • SHA1

    87bdb3cef740742264f81e43720112aa7ed5b648

  • SHA256

    a2c46d148e450c19c08f9539f58f4cebd5715b7bf8489cdf02aeeede8514a439

  • SHA512

    0abe74ae9ffd676741ca62c234c5cbca1a95fd22c2a5dda17a674e2c89672c4990b9136e63bed68d8a8a72b020ffc92130cf905f42aa78b47dad18208183f3ce

  • SSDEEP

    3072:ayrVpyYEe7wAwRArHAWhNr7fjnPry4tc06mOvAaPoZuU7VIIuL/DpBK7T4X:aKIYE11OHTNLPrByJmOvAOMzuL/DpyMX

Score
10/10
ratdocvformbook

Malware Config

Extracted

Family

formbook

Campaign

docv

Decoy

U9joSV3jrRWaOFCKHlsP

BWItfadLRNElFi4n

IwwjhJWT8tzs4sQ=

7tvFIDbQqJsB8URT3RNGkHw0QXo=

ohLOMk4YxjHG

wjIBSnU4DBGp3GdYKmuj7hCEXOBwqzs=

a1qxDSU3hjufvj0bpfj3Uw==

XDxmge0LinYBHuU1BB9RlHw0QXo=

gHy8MUUvfjseUDH/laNRskjL4+2cpSo=

3l5awfWzfpndFbQgLGcH

fQQagL/xa+cEOBpiaroqcP7Y

ta//E0xm3pTAt2qKHlsP

pP25BCAYTnWdQthIEXHXVg==

RUBcttrfWDZ9lpnxt3A8TufQ

No5nx99vdhKVHHLdleEocH4=

pIWF4DJQ1eEOwkulerNvszfXpyrm

1jawFSSZXBRymxFLEXHXVg==

C2wAUJqBPs4kBFikbplAlCrTqy/s

6z/BJ3Ia48YuUz5+NTE8TufQ

rn97xOf1iIWrCZjj8A==

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_a2c46d148e450c19c08f9539f58f4cebd5715b7bf8489cdf02aeeede8514a439
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections