General
-
Target
JaffaCakes118_d93c3ea8a2e419476b35285093ad14e11b125b8d956d2b1e5c0abe098e4f3981
-
Size
188KB
-
MD5
a766b0cc6f406bf5e02ffb81ed50818c
-
SHA1
a45f09c47209d043e0a8a18b29b25dc32594a191
-
SHA256
d93c3ea8a2e419476b35285093ad14e11b125b8d956d2b1e5c0abe098e4f3981
-
SHA512
8ac78b45becc587592abae31284a304749ed4e91a72ff7e5fa73716e59c83b213e5f314baec4ec1d700c6eabfa1c94e5c091cf4ceef5771a94d7da869d646f1a
-
SSDEEP
3072:hEy1EkUsIhXS5Qm3PgHMJQdKBduKECoBxiUtEaz5l9OxacckT1:xzLyQPmoGKBduHCuiUtEaVlMjckT
Malware Config
Extracted
formbook
4.1
d2g7
inviteonlyme.com
noashopping.com
raysyoutube.com
chicagp.com
brnguatemala.com
speechboutique.com
philippinepodcastdirectory.com
konnecio.com
9q1ng6.icu
treez.info
appleiclou.com
pettras.com
txherz.icu
freearcae.com
mindpetalsoftwaresolutions.com
my-beautiful-switzerland.com
hpzebike.online
fadsekclub.xyz
newcastledhaka.com
varidsk.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_d93c3ea8a2e419476b35285093ad14e11b125b8d956d2b1e5c0abe098e4f3981
Headers
Sections