General
-
Target
JaffaCakes118_5e1d930f42eb51b191a8e35e4d32376c3702039af10293f41d7d3f343a5a990d
-
Size
188KB
-
MD5
55aa15256c3ef30bc9f492a12e3d03b3
-
SHA1
8301fbd50e6cf8ebe50eb966a1cb77ce7f0eac8a
-
SHA256
5e1d930f42eb51b191a8e35e4d32376c3702039af10293f41d7d3f343a5a990d
-
SHA512
6890749ccd9155c91307ccd3c7dacf7287369f3441a8031e15b791b66fb97d3913e40b72ca2fad8b318315aabe152fee0c1dc9420076072da668687e93aa6d82
-
SSDEEP
3072:WJPYEzbLNtd0n3O+SowukEyfZP0IcbD9u8X+OkqqLPw:WHW3OlLpfZP0IwO1qMPw
Malware Config
Extracted
formbook
4.1
cy84
buymarijuana.website
mars-house.com
highloopkids.com
hengjialives.online
hht5292.com
yiniu54.xyz
baykuscuksapsap.net
lzzcxx.com
nbchangshun.com
backfields.farm
randacominternet.xyz
bralumi.online
sportsorb.com
graveounce.online
dddsss222.com
xiaojuju.site
returns-nagoya.com
tepinvestmentbeylikduzu.com
81796.land
thisisit972.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_5e1d930f42eb51b191a8e35e4d32376c3702039af10293f41d7d3f343a5a990d
Headers
Sections