General
-
Target
JaffaCakes118_2df73ce7369090bb037ee935b7ab8b6f0864d2708aeffe43b56c072e5d958d25
-
Size
179KB
-
MD5
a0ce13ec3497dfd442c2ea805c2ac3bc
-
SHA1
44c7c9cc1bd85fb1916f3aff753adf209d55b11f
-
SHA256
2df73ce7369090bb037ee935b7ab8b6f0864d2708aeffe43b56c072e5d958d25
-
SHA512
deb373991da57f7cf73b88b76c462a596f013e419b0cd433bdd7bb73a5133a8831f8ecb233ece6a8aac835174e5e8a8b0bfa6b1cfdbbcc6d14d2bc7f9c93b256
-
SSDEEP
3072:F6/prv+gswzYHjdsxhJWQURJHkMcwLABzBjNwRjH6uHCO2nAqkO+GCHOISQdiLb2:F6F7p4m3JWQkNQBzBj86YoAPOIOpt2
Malware Config
Extracted
formbook
4.1
bll
festivalnationalduvodou.com
hd135.com
travelhuts.com
098man.com
railsclinic.com
sandiego-garagedoor.com
noronit.com
ebfalml.com
healthylivingcity.com
presenterprowess.com
kalbarnews.com
thecloutpalace.com
tomhufford.com
cleveroilcbd.com
vzt4cu.info
fluentio.com
paamtrafficsafety.com
xkntvcbc.win
northmaintw.com
www2998y.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_2df73ce7369090bb037ee935b7ab8b6f0864d2708aeffe43b56c072e5d958d25
Headers
Sections