General
-
Target
JaffaCakes118_d037eea5ad7b79e8473f3ebb2f97bfed55b371ccd51970ffc556d30b482791da
-
Size
188KB
-
MD5
3a470fe6103ed8b2035a8fd2aac4828c
-
SHA1
0d50dd1ffe919cd54236cf0c265fa880011d3454
-
SHA256
d037eea5ad7b79e8473f3ebb2f97bfed55b371ccd51970ffc556d30b482791da
-
SHA512
f3721be0f5235710f83fdba59803f56fe63aeb5393ee85e3ebdbec3f680d3a75c4d35f0a4f6668a7d19205afbd6f65ac014927bf7ec01bcff5cbd66eb54ff7aa
-
SSDEEP
3072:LDdLk//VH6ki3VRsCWsSLWobbMs7Kgw93kCNKIn/g0Q+v+1:AjUV29hLWobbMs+gO0lI/fE
Malware Config
Extracted
formbook
4.1
b0h3
agiledex.site
shibieziti.com
reedmorillo.info
giampieroturco.com
polarsc.com
myfamboo.com
antihackershackers.club
valixme.sbs
specteh.tech
woow.life
dmgbw.com
customsignsforyou.com
metabotech.com
borrowusdt.com
syncitymafia.store
familieberger.online
xn--h0t68n.net
patrickmstevens.com
nursinghomes-es.site
feistyverse.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_d037eea5ad7b79e8473f3ebb2f97bfed55b371ccd51970ffc556d30b482791da
Headers
Sections