Overview

overview

10

Static

static

10

JaffaCakes...e8.exe

windows7-x64

3

JaffaCakes...e8.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_349ce1bd4da04c04f7288031ff263eb2e89478ae08754f61a5c6649a7a3831e8

  • Size

    188KB

  • MD5

    7b288a9d90fe4128486d18422b5dc242

  • SHA1

    678cc8a1136628a9921e87f181b90f6cd56d7ff0

  • SHA256

    349ce1bd4da04c04f7288031ff263eb2e89478ae08754f61a5c6649a7a3831e8

  • SHA512

    87a361d42dbe2b9b36aca18632bb1d2a071597de35a15dcfe3560a134c714c067e9f7a62977b1d2fc8bf15d2abc3d3fd7d98eb88b260f9a41bf9dce112aa1c00

  • SSDEEP

    3072:qAnY5MUgN971NW+KVwiiqBoFlGFyI3Bmqo1Iogd4KHfEuBv/G33RS36gtD:qBWj1rCfuFMMGFoWzd4K8uv/Gnjgt

Score
10/10
ratd6izformbook

Malware Config

Extracted

Family

formbook

Campaign

d6iz

Decoy

FkA/Rc+zw+0paU+GEiQh+g==

u54Xp6nujzFowU4P

EOvDCsjIcMgdORQ=

AuwHDKo90fNowU4P

pgyJWSAeSn6PEafn3w==

3uX1Rw+ed9vrNQ==

jF5ap2Dv9C1PwGrd2Q==

HO748Nunv9ftKA==

Y3nTdCLF3gspa0+HEiQh+g==

sTcJEshxAzXL5wGzPaA=

E/w4u2Vb6henwGrd2Q==

HyiDPgQFmbk/EuMX3D7NrWLX0XU=

E2QDkA/Sapg7+GJV8ULKrGLX0XU=

OSgyD3k1WHd+8vQc48OmEfvTww==

AVwcD5BnNY6o588P2A==

OghAuUYpwNlqf3CtJsAyRL5h

qQbNBg5d+StQ22hVZXWVOK0=

/+bLGhaIK8gdORQ=

2EwZLB/UCA4=

he9L+LfD0TAFfsIA0Q==

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_349ce1bd4da04c04f7288031ff263eb2e89478ae08754f61a5c6649a7a3831e8
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections