General

  • Target

    JaffaCakes118_08a21708d6f599bfbcb69780ee5d8d657cdac26dd2861701e833969006e07f0e

  • Size

    188KB

  • MD5

    50bd7e456e29d1e3a796115a0bb6aadc

  • SHA1

    738927569f923d936f27b04d48ffc556ab4601b0

  • SHA256

    08a21708d6f599bfbcb69780ee5d8d657cdac26dd2861701e833969006e07f0e

  • SHA512

    2f7306953d80844c89ce7ea35da260fa7405ff8053bd792dc133f20752c34aa6a065a1a0db03899bd1459849a58fb7878d701dac64b975fa0724952036c3a274

  • SSDEEP

    3072:nm0Nku3743XN3/lkmQwqkn5/QKSjl/A6Ql4zJBOfZiAoAixlhaGl/:zCB/a7wqkn5/QKSRA6u4zXoiVM4

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

j37e

Decoy

swai400.xyz

futurorp.com

themoonlightblush.com

b7b777.xyz

son-teklif.info

digitizationpros.com

createdmemories.photos

yourufancy.com

ismuoz.xyz

milchchroniken.com

valleyofthekingshotel.net

castleworkshomeservices.com

alraheementerprises.com

oppewzark.xyz

theshipkart.com

occamxdao.com

tdsai.com

drltadentalia.com

csv-data.com

spawn.digital

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_08a21708d6f599bfbcb69780ee5d8d657cdac26dd2861701e833969006e07f0e
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections