General
-
Target
JaffaCakes118_140585061b3ca1648936d473be52f4e7271e410a3c69b923c03ce09e0607e4cc
-
Size
188KB
-
MD5
6810904b76e34ae39ec2c149ad278fe5
-
SHA1
e8a6f3ca1d8310487b9086fe9407c1dc0981e1d1
-
SHA256
140585061b3ca1648936d473be52f4e7271e410a3c69b923c03ce09e0607e4cc
-
SHA512
9ae6bdbdbf40c89943d1614624d50ed70e1cb3be47aa154b036efb244db3fb707480867592f6b42cf54662421af76ecb1bc60d4b8d4c01d6dd0661c6134376b3
-
SSDEEP
3072:OUijkD6J0fVitI3JOvDhqz09XaWuQefehFQRAlyF2dLLMJHphFHC4l7rn:mtGJsDI8XaWuQnbQelyYdAJHphFHCoj
Malware Config
Extracted
formbook
4.1
o27a
rfmag.club
zkskzt.xyz
prestitiprivatodaviden26.space
topfxvn.com
irreverentlabs.net
untosuit.com
conquestdevelopmentgroup.com
meterarchitects.com
gwendolyngantt.com
1xpromocode.site
sellloooofolk.xyz
alonzorobertsunderwriting.info
harisalikhan.com
gocqsf.com
carrotstay.xyz
fortumex.com
xiaosage18.xyz
archeage-unchained.com
logicskopisch.world
xj9j.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_140585061b3ca1648936d473be52f4e7271e410a3c69b923c03ce09e0607e4cc
Headers
Sections