Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...27.exe

windows7-x64

1

JaffaCakes...27.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_9a30a94b5115dec626b05946fc29dbcca7ac330846b3cd6480063b6561c60027

  • Size

    188KB

  • MD5

    edbe3a3ac1370d1e184f3df335968544

  • SHA1

    de529c5e4a9584a74a1aac77ed761d5e1c7ab50c

  • SHA256

    9a30a94b5115dec626b05946fc29dbcca7ac330846b3cd6480063b6561c60027

  • SHA512

    ef911b53dbd2e86a0fef7a4ba8cafded5080c9390009e75c0d61092ec8b5dfa6c9b0d82552f8327d4f1f1a335681bffd2d72f3eccefe0dacec65401dda58555f

  • SSDEEP

    3072:+zk5vEQ8LNacT3Eqb5ouqvGVCTzqPJ/8vsmlohDw27iGcNezF:NLC7EE5tquVCTOt8vGV7lcNez

Score
10/10
ratlt63formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

lt63

Decoy

fortrantelecom.africa

ffafa.buzz

bullybrain.com

ekeisolutions.com

lamiamira.com

noahsark.xyz

beautyby-eve.com

cloudfatory.com

12443.football

hataykultur.online

donqu3.sexy

breakthroughaustralia.com

havengpe.com

cpxlocatup.info

corefourpartners.com

amonefintech.com

thithombo.africa

bassmaty.store

fdshdsr.top

lifesoapsimple.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_9a30a94b5115dec626b05946fc29dbcca7ac330846b3cd6480063b6561c60027
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections