General
-
Target
JaffaCakes118_e3f586bf80f9290cefda280edf5ef52818b1d7d9c4d1636b747e36d0394aead2
-
Size
188KB
-
MD5
93e4bb2f2e3abb83219b6690d677697b
-
SHA1
212a7f05c8ae597b725518512b8a1456a93c3c7d
-
SHA256
e3f586bf80f9290cefda280edf5ef52818b1d7d9c4d1636b747e36d0394aead2
-
SHA512
9dea3d1c832fdc33c6b8c783f51525780e583c650181cfb35747dc019184351331170e0f0cf486def0e40005978da733e5d7e457a8f62e3e7239c77fdaeb8c11
-
SSDEEP
3072:iZfEl3zqq7eS3+ut89eQLa8vpw6s8kiohM0741:DuE+W89NLa8vpwaFoXe
Malware Config
Extracted
formbook
4.1
b26k
sanchezolvera.com
kitonkahospital.com
carbontrade.fund
mmjsq.online
idealnaya-taliya.store
heritageathleticzone.com
rdirobots.com
peakperformancemetz.com
lucianonunes.cloud
4cc3ss.com
modcnstr.art
quentingreenrealestate.com
fulinjituan.com
totalalin.xyz
ljpai.com
frikixpo.com
founderfeels.com
kalice-events.com
maroubracomedyclub.com
itinerantriders.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_e3f586bf80f9290cefda280edf5ef52818b1d7d9c4d1636b747e36d0394aead2
Headers
Sections