General
-
Target
JaffaCakes118_4d7790adadb440588afff7b3124b223f41bcbdeba127a5ac9e2d3eadc9ac9e59
-
Size
16.4MB
-
MD5
f2982bf391bf0ee6599c72b25f096427
-
SHA1
5d8175a0f86bcc4c123e9d86d74cf1efd63046cc
-
SHA256
4d7790adadb440588afff7b3124b223f41bcbdeba127a5ac9e2d3eadc9ac9e59
-
SHA512
fc3f5327ed8590f3c0dc694a8776e5ad6a53adeae91c1473f392646d535810c4d7ace0f92e39ade7da4cc2741cf121316fd0372a9bd5b3d1d2af46aa5282a973
-
SSDEEP
3072:5xuAXtk1cQgSNRA38Md2xK+FU9LrpxGJfA95mDR2XQrmgSR8mfM:3IO8g4K+FU9/pyQe2XQaZ8W
Malware Config
Extracted
formbook
4.1
d94e
123456yudang.com
t-eros.com
genesis-urban.com
gartersnake.xyz
freshinews24.com
molasendo.com
365889.xyz
multiverso-digital.com
nahlabalmsales.com
cashyoga.space
momtipsblog.com
uktbc.xyz
hu6aecfzts33zz.life
luxuryholic.com
wtsgdy.com
bathroomrenovationscenter.club
mouradhw7.xyz
sehoonp.com
danplace.com
zc006.xyz
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_4d7790adadb440588afff7b3124b223f41bcbdeba127a5ac9e2d3eadc9ac9e59
Headers
Sections