Overview

overview

10

Static

static

10

JaffaCakes...b6.exe

windows7-x64

1

JaffaCakes...b6.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3a17abcee8b629385d5dad6aa84bd786b158a5fd00806ad39392391ecbe7afb6

  • Size

    188KB

  • MD5

    b590e9b2a78908ae4513d1dc831c9f08

  • SHA1

    5e639af59a293c0b942d6648699eeb9fd6a7957b

  • SHA256

    3a17abcee8b629385d5dad6aa84bd786b158a5fd00806ad39392391ecbe7afb6

  • SHA512

    10975c29df54be94961c331a9463713162416fd83dacec676832df9af69002d4f932cc7184841de7c80a2a8033cb0b20195b45fdd35483931188296ede123e4e

  • SSDEEP

    3072:lqLbsMEACpqu/5N3e1MlLeg68HF73jyvyg59H7iet1KwZ9:8IrBeuT68HF7TyvJ9bFtk

Score
10/10
ratgg82formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

gg82

Decoy

designsbyfiona.com

humelae.website

researchtility.com

rootedhearttherapeutics.com

feetrumpet.top

true3.xyz

shapemate.xyz

comercialagraria.store

ledsland.com

supcon5t.com

kakao-soleeemom.com

vaynhanh50phut.xyz

dinobytheway.net

defiunitedstates.xyz

aquamoon.xyz

lovestohelp.com

dwn-flasplay.xyz

ituagora.xyz

hadq.xyz

kodacapital.xyz

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_3a17abcee8b629385d5dad6aa84bd786b158a5fd00806ad39392391ecbe7afb6
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections