General
-
Target
JaffaCakes118_af0e261d6319b97dc78901e574881039df0465689370d00c4f450c7b71f4ce14
-
Size
188KB
-
MD5
f38b233e242b75f5d9828d30785eb179
-
SHA1
abf2ce1338bb63e3e28135f82a456ceb04470650
-
SHA256
af0e261d6319b97dc78901e574881039df0465689370d00c4f450c7b71f4ce14
-
SHA512
d585f202cc18aa08d8761946c3afb3cdb2998757a73abeadd5605c00b58fa1b6d298913f2775113e0e95c7441ac626f40952f0a24f6416f0c6f900911902fb9c
-
SSDEEP
3072:HXzB8XkE/WeUkMdb3V0Qssp8KVRRC8zd1WScwV1yHJcKzSMwf:HyD2zVVssWKVzC8JoSz1iJ5
Malware Config
Extracted
formbook
4.1
d23g
444ccg.com
emilygracemann.com
poojaconsultancy.site
themoabbeast.com
animum.online
crutchenterprises.com
anywhereinyourunderwear.com
billpattersonforhd24.com
milanosalonurbana.com
maomi23f.com
grazianopattiasinalawfirm.com
food4life.biz
cartskipsviewsigned.xyz
bentheballoon.com
suncoaster0.com
alexandraluxuryvilla.com
de0754.com
innovate-property.site
chicagoweave.com
gozki.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_af0e261d6319b97dc78901e574881039df0465689370d00c4f450c7b71f4ce14
Headers
Sections