Overview

overview

10

Static

static

10

JaffaCakes...bb.exe

windows7-x64

1

JaffaCakes...bb.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8845eae70b4f8653fc86919fef4206f62ac7616991b2e04f9afeae42fed335bb

  • Size

    188KB

  • MD5

    7fa2ffc79f160104edac3f42b2c1b205

  • SHA1

    f28bea960971eb3d216079c0fde4310517a3da57

  • SHA256

    8845eae70b4f8653fc86919fef4206f62ac7616991b2e04f9afeae42fed335bb

  • SHA512

    b4934ef478736d8e1c9d75e685279fd72c249842982f6e7d8f9653c50220c38698edd28d499ec3244545f3e3a5dff5033cfccafc0befa75eac7a3dd47ca434fb

  • SSDEEP

    3072:Y4zEkQbtzXvG7c3VU5M+QVaO3YzayHKpqalx/CGlrGJPfvvE3:GMuVoQaO3Y4pqgrIfvv

Score
10/10
ratfs44formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

fs44

Decoy

whneat.com

jljcw.net

pocodelivery.com

outofplacezine.com

yavuzcansigorta.com

xinhewood-cn.com

cartogogh.com

5avis.com

joyceyong.art

digitalsurf.community

blackcreekbarns.com

magazinedistribuidor.com

sportsgross.com

drevom.online

mayibeofservice.com

gareloi-digit.com

permitha.net

renaissanceestetica.com

facts-r-friends.com

dach-loc.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_8845eae70b4f8653fc86919fef4206f62ac7616991b2e04f9afeae42fed335bb
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections