General
-
Target
JaffaCakes118_e28c1f77eb2d93a3cf24a79906ec8a796bd481ef2609d57958109d68503891dd
-
Size
188KB
-
MD5
9824ef7af9f80f0ac9922863bc4e11da
-
SHA1
b3e4d751f3572b19849966e847bd46145e8a8bdc
-
SHA256
e28c1f77eb2d93a3cf24a79906ec8a796bd481ef2609d57958109d68503891dd
-
SHA512
9e5b8339cdfd872b404c7807f6f46026778227bb8090b46633cbdb5102d8829f061e04fcb64c92026660423c06129f76841794d72bacc34fd3a0cbf425155ed7
-
SSDEEP
3072:oNcdHkoBH4U3tYOvAz398eN5PctLtlhtlhK9ik5KrCcai:LUb98+FyLtlhg9ACD
Malware Config
Extracted
formbook
4.1
d1s8
xn--hy1b43d3xk9tap20a7jq.com
ratedbinoculars.com
g1rawat.com
solten.online
rawmaterialsadvisory.com
bulkbackhauls.com
oldartbooks.com
turtletraxontopsailbeach.com
onedollarlights.com
iamhwh.com
yiyue10000.com
denisepishgam.com
67ys.net
secretparisguide.com
stephaniesews.com
rubiasytostadas.com
azizyagraphics.com
magicmea.com
villatradin.com
icatsles.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_e28c1f77eb2d93a3cf24a79906ec8a796bd481ef2609d57958109d68503891dd
Headers
Sections