General
-
Target
JaffaCakes118_40af20bbedc34d7286cb9a9bb79d7785ed7c61dd1e2b9065398d811cbb774519
-
Size
188KB
-
MD5
75f77debb4a26e031fbda6c00cac8b3b
-
SHA1
2a0480745a0789109490aa83646b919e3b1021c7
-
SHA256
40af20bbedc34d7286cb9a9bb79d7785ed7c61dd1e2b9065398d811cbb774519
-
SHA512
07ac8e9c45f3a34f24970195731c6c0da66b2ae60e909c9f1f41e02fcc0f760c2577289004bbc97e4af0593753b7fbeab55c740da9de5f4d3f42156aa35b92bb
-
SSDEEP
3072:hsF0kmKjU6Ob3Z+B/AVfj6RCQRblXEi983pxFXj3mDQqqWk04:rhzZi41j68QRR+jFXbAxqfR
Malware Config
Extracted
formbook
4.1
m0r9
neekoluldao.com
pandolam.com
homestore.website
inthemoart.com
plubmingcny.com
tsandjsdjproductions.com
bangkok-bars.com
theroganexperience.com
cisneros.media
cxaerfa.xyz
dalafea.online
eppsallen.com
kksm1.com
navega.site
coloradonews.info
rnhues3j.xyz
languageslibrary.com
metapharmacyphuket.net
invisiblelady.com
suculentaycactaceo3d.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_40af20bbedc34d7286cb9a9bb79d7785ed7c61dd1e2b9065398d811cbb774519
Headers
Sections