General

  • Target

    JaffaCakes118_191def0e97c702694f8d66ea2b7b864b7bbf309797d264590e9f22bd93dbd1e1

  • Size

    296KB

  • MD5

    8261d66324a3e1306fafa5f1d40d5292

  • SHA1

    7c9fbca50a668fedef8a985f93850d15379f32cf

  • SHA256

    191def0e97c702694f8d66ea2b7b864b7bbf309797d264590e9f22bd93dbd1e1

  • SHA512

    f3802376fa080ac57ed136b9add7b6a5b70b4819aea1223298f8ca3ccfad98ff99a044f3596a956b5771594ca2af3559ee41cfaea7a03adbd6ee5ba6302aaa6c

  • SSDEEP

    6144:pZCj7SYnFwlxNypBqdJKYv3+Muz7DEAwkublFcNmA:Q7ExNyX2IXEAwkE0

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

o27j

Decoy

catchakiller.net

nansatsu-meguri.com

torshowroom.com

loglog.company

diabetvn.online

pernie.digital

shopblodie.com

suzettedavidrealtor.com

892uc.com

behlfamily.com

crazeekandee.com

internationalestimatings.com

afifurnishing.com

bjsalt2fen.com

tamdietitian.com

lo-nen.com

nanjinghu.com

dcato.xyz

right-on-target-store.com

xn--399a9jk03ai6p.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_191def0e97c702694f8d66ea2b7b864b7bbf309797d264590e9f22bd93dbd1e1
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections