General
-
Target
JaffaCakes118_9f778bc1137f1dacf2f476af670c256677231c03d564dae1ef0bc798011362aa
-
Size
188KB
-
MD5
1fb58c36a3aadc1e7181caf5935ba1d7
-
SHA1
b731ad2511341255da71602cbabbb21a221f548e
-
SHA256
9f778bc1137f1dacf2f476af670c256677231c03d564dae1ef0bc798011362aa
-
SHA512
9d069602821c5a7fbe80844db73341245d0c4887df19e598ca510b5cdaf0c77716f1160f548f5204b90aa7c8a73cbec6ef166010a0bc162396d1f79302020960
-
SSDEEP
3072:tUCEP/4HR1kVb3iim4Z0Q6FDXK/kIMSZXO4roUfHNII1:6/4azip8H6FDXGVXnlfNIc
Malware Config
Extracted
formbook
4.1
m0d4
prettyhairdivas.mobi
cityblocksnft.com
laraqiiz.com
mubarakdigitalmedia.com
perstockholm.com
xn--imprio-dva.site
baigouw.com
support-client-video.com
phomas.info
dengedizayn.com
zoommachone.xyz
houseoflancasterhours.com
petarungslot.website
tyrs-it.com
dalianzhuchiren.com
tenthgenerationtorah.com
portres.online
1-minute.store
shikakunazo.com
veymes.store
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_9f778bc1137f1dacf2f476af670c256677231c03d564dae1ef0bc798011362aa
Headers
Sections