General
-
Target
JaffaCakes118_d6c1e12a7e42ebb79e7468069e11d7529fe591cfe8edda533e957e2a20b85776
-
Size
192KB
-
MD5
1eff15435b7880fe82a5072802324b9e
-
SHA1
c0fe5b2f44930a6b694e5b04d6e3a18231ebebb5
-
SHA256
d6c1e12a7e42ebb79e7468069e11d7529fe591cfe8edda533e957e2a20b85776
-
SHA512
b4dde56d9966dbc4a2f8b02366671768644bf63666c26cc0629878aa90f1bc2158fa30e351130ff88eb9a1a68b958b6ee1c67229119ce7faf42ec17de4e9f28f
-
SSDEEP
3072:kadASkev5RW9SP3NAQkg0KVXV5RWAt6TnlURmPUHo5CJMcvyAWimk3//R:JnPNVWKVXV5vtiJg2cvDWw3//
Malware Config
Extracted
formbook
4.1
gt6s
wintericon.win
metajose.xyz
apple-honey.com
processmanagementtools.com
metaslat.com
deem198.site
my-seo-toolz.com
p-blogs.com
meghanrphotography.com
applyspoil.com
e-uarts.net
feliciapinedo.com
iranyanstore.com
100kplay.com
herzenfashion.com
011557.com
justjumpinchicago.com
robyspestmanagement.com
6nosuke.com
enchwx.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_d6c1e12a7e42ebb79e7468069e11d7529fe591cfe8edda533e957e2a20b85776
Headers
Sections