Overview

overview

10

Static

static

10

JaffaCakes...1b.exe

windows7-x64

3

JaffaCakes...1b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f9be5efdc2dee8da833d190dd7617379d8c2998e70319c56a1b8dcc8ae38031b

  • Size

    188KB

  • MD5

    c6be80db13f466c7740cae2ad76c8553

  • SHA1

    c0134beb22a01b2ce784567891a372a96d88c38f

  • SHA256

    f9be5efdc2dee8da833d190dd7617379d8c2998e70319c56a1b8dcc8ae38031b

  • SHA512

    948c2873820af9265bac443d0cd9e6f23ab736999f20d9949a79658046dc807cb629d03abf5c35198570bd5034395171cd16647aa1ddc22bd490c293a0ce6b3c

  • SSDEEP

    3072:P2D3fEQp14waCJL1NWX+ptiyjzl7OqZMuDKz/z/oT2qyIAkkzsDsSG3bI:P2D3F4wN1a+3h7/ZHEjoT21kXIr

Score
10/10
rathy3hformbook

Malware Config

Extracted

Family

formbook

Campaign

hy3h

Decoy

aCFSxILPNpTlnJ+AZWZZ1cp4GwuD6g==

+8jHMR7X+5v1aol0

C38e/p4bp+sEoKyWLclhZmg=

URAtmCMhCnqcUGwXKgwT

KJMh9+7g35GqwhjvRqurzpl5MK8=

UkXC6zl7DqPMIQ==

KP0vtmKoKzSFsADVOslhZmg=

pKe6Ehy1cd0C7dhjyYabsg==

Nf8cc0UgXBw+bdnNOMlhZmg=

3iHHqVg2M+433MasyYabsg==

PWHoy3LXg+MGp8CN+NU=

V6w5DRUmWkJegfPuh225Ach6iASD

sUZMq2znHIST

G4ImCffu34ujt//WOslhZmg=

SEW2lB+0DqPMIQ==

2lklwM6h/+/igY0=

YfXyTSOYSN0NqINbh+r+JC/NcSa78BE=

WCMjgyxmzJ7B6mIM7EKL5VQR9g==

LidT357IZoursgy3yYabsg==

cEF5JW9LyW6K

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_f9be5efdc2dee8da833d190dd7617379d8c2998e70319c56a1b8dcc8ae38031b
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections