Overview

overview

10

Static

static

10

JaffaCakes...96.exe

windows7-x64

1

JaffaCakes...96.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_dd2817a80239eec2fb2c93583a2685930a46758eb93d95bafc22b97914266d96

  • Size

    188KB

  • MD5

    f8bd3330a97e5b50974b3b2fe6bfa06c

  • SHA1

    f26690211bab251952d94083791d65ca9e9de4eb

  • SHA256

    dd2817a80239eec2fb2c93583a2685930a46758eb93d95bafc22b97914266d96

  • SHA512

    e619777a267b5e91474abc2c1ba04608803646bca90302d93755d180ed14ed629358838dc4fa4c008b7ce53c8d76b489cea5f43357ec3e35d8bf6707e197f9a7

  • SSDEEP

    3072:xnxfRok/bYCJ5Jr3Lms7ZqRX8euo6h1DFf6EITX2r/9tDY:xp3bzDLX1qRX8eu3f6EbDXD

Score
10/10
ratg28pformbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g28p

Decoy

whhmgs.asia

wellmedcaredirect.net

beggarded.com

wtpjiv.site

todo-celulares.com

parkitny.net

43345.top

pro-genie.com

cwdxz.com

cbc-inc.xyz

healthspots.net

rulil.top

pyramidaudit.solutions

k8sb15.live

hempaware.report

usclink.life

stayefs.net

05262.top

shop-izakaya-jin.com

iccworldcupnews.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_dd2817a80239eec2fb2c93583a2685930a46758eb93d95bafc22b97914266d96
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections