General

  • Target

    JaffaCakes118_13016d02e26c1adafc0fa5581b87511545e0311a5117f03c72935bbf235a4dbd

  • Size

    188KB

  • MD5

    6dc1bd403ca7b74ed85ec41705c90510

  • SHA1

    1c6ce7f285d93b8f33b844e328c87f57d2f59e1f

  • SHA256

    13016d02e26c1adafc0fa5581b87511545e0311a5117f03c72935bbf235a4dbd

  • SHA512

    dae7e0b1a2aad732c475cd0fbafbcf2ec24b9a206b92ed9c3e1c2177993f0cddffc3764204391534250ad57f76c08ff5195319b8ea1a5485f29a2e2a3e0ff256

  • SSDEEP

    3072:5mYok81FIuIZf0DOO2KmCxag0XSXfGrX85X7M8H9sS1c54tu:+FIwDNPmsag0XQfG2LfHmHOtu

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

b01r

Decoy

ra-li.com

ttcap.art

shapeshop.site

estilo-accessories.com

xinliuzengzhang.top

edunowblockparty.com

247video.biz

tridex.africa

qwujt2.xyz

ivorroberts.store

phpmbai.site

lesec-talme.cfd

bcmii.us

whalesnft.online

dental-implants-usa-3.world

25062.top

peinture.photo

serkanotokurtarma.com

okzxvv.top

reefkitchenssetlement.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_13016d02e26c1adafc0fa5581b87511545e0311a5117f03c72935bbf235a4dbd
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections