General
-
Target
JaffaCakes118_f079f6f37ae9708169077d995e6d2ab536660d480c0775a2bbd39eac8b034c5f
-
Size
188KB
-
MD5
f2c611e3dde489b72f6c9a6a8535336f
-
SHA1
76de66d7accc13b89eb8f1076a11b4cffa81a353
-
SHA256
f079f6f37ae9708169077d995e6d2ab536660d480c0775a2bbd39eac8b034c5f
-
SHA512
2322662cbd38caaab5647904fa342d4769e680f6cf3752390871cb0a2e4caaa3b7119ac68d04da920994452e3cfffc0eb700c07ac673c0bc74b8911590cb0ec0
-
SSDEEP
3072:iWsAELKPH3L4J375eHpqyr4NVZh5KJlJaXL6CQd20Sx:ktD170Jqyr4NTjWl8Lb0Sx
Malware Config
Extracted
formbook
4.1
th47
bestguy8.online
artpressonline.com
touzitest01.com
thecolorbuzz.com
xn--est572f.top
ayumandya.com
arxdigital.com
ayaretri.online
ajanseralp.com
createna.com
inquisitivemeditation.com
qhqfoq.cyou
mango369flower.com
comeherequinn.com
xvideos202216.xyz
reopdat.xyz
guosetianxiang.xyz
asynctest11.top
pineclass.com
cq4n0lrbygmgke.kred
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_f079f6f37ae9708169077d995e6d2ab536660d480c0775a2bbd39eac8b034c5f
Headers
Sections