General
-
Target
JaffaCakes118_f89b5669e19c1bff07365ca3f654d2beef09b1c0cca0a7c561657243f5119737
-
Size
188KB
-
MD5
68e26145c432f3229ccc317be9953aa1
-
SHA1
72a955c0b59e54ff7ecb11900a9bee29979e5133
-
SHA256
f89b5669e19c1bff07365ca3f654d2beef09b1c0cca0a7c561657243f5119737
-
SHA512
12d7d9bbf947065093fb9fd8e0a27128b155d13f9b80f7289e848e32d8f0ddaf505baf416f91f53106872b1e19c3cd6d9596f934e1f31ebfda155892368e89e8
-
SSDEEP
3072:F/HsBFrP/JxUGvKJ1vLxiHZBt5KuQheOQDUap6ytdoffAEn:2T/74vLcDKuQhehDUW6+djEn
Malware Config
Extracted
formbook
4.1
amdf
xadazheng.com
bremorgan.com
keilaniclothing.com
du9a20ofolvhfr.xyz
santamariacourt.com
wcagls.com
visionuptechnology.com
sddysrq.com
pencetslot.site
wpcoisas.com
caomei08.xyz
infinitepotential.xyz
anotherchanceranch.net
ymterp.com
zhuyunming.com
elementarymodel.com
edmondsonfinancial.com
adsnethosting.com
obohsan-souzokusindan.tech
helicopterart.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_f89b5669e19c1bff07365ca3f654d2beef09b1c0cca0a7c561657243f5119737
Headers
Sections