General

  • Target

    JaffaCakes118_9059c4810bce97a830fcf0c57bfc929d38e01017ae7e0e7802c75940df4edec4

  • Size

    188KB

  • MD5

    66512dc06b72c47e131027fa8f930d29

  • SHA1

    f6f4bab25628549a817fb7c69e7e58c2a6b4e24b

  • SHA256

    9059c4810bce97a830fcf0c57bfc929d38e01017ae7e0e7802c75940df4edec4

  • SHA512

    c16c461b3edf2773a5cc72644373d26b6fd27e7d395a8218d9ff821ddc85fbe7f24e71eae8276fa3a7a9fe8ee516b2caceac286d98c1bafbd23fde9cd8cfa3ae

  • SSDEEP

    3072:rX/uHiIgZoQXzHc9heuYtWJtiBl/Qmh4dcBJa8gNQYtARuK6wbSNkSqG8KwE:7/jFhzHseuYUCIg5/a8g2xbyoir

Score
10/10

Malware Config

Extracted

Family

formbook

Campaign

gvv5

Decoy

uIMshVyYo2RGU/XfQ6No84Rw

bJePqQCEIvouMJyS8nVu

Vd1oa3q92YAaeKJooLlr

Y73nMJbf52ABSY9tovHyLLpwjg==

BURGdNdVAN51teOYz3JPmYA=

Wmtys3qMLxQhJ8O3LZax9ph/1ZmXZQ==

KcMaeVETNbVV9Ys9ZkLfKU8IWFc=

LlFMx57nFbYzeqFooLlr

Oo24Hu0DSszwrcI3LcnJvQ==

QQzqWy64WRNrN3sF

CZ4qYMdzlhm8S9eZxbKv/j4thg==

enwwcNmP46A3xX5rynJPmYA=

n3EjX7h7iByY5RypC3ivr6aG43OWbQ==

EZwZqIKTJdpwLJVTv88=

cPAqcMsTFpAXb4USdiqz8E63DqOY

aCjkwhb0DbM6drdxqkcZZT4oUg0/y+uT

NkY8w6zmCbPGkaUnt0pv3kk0ghlX6/6Z

/kWRDuwDcICGPQ==

9DRQk18bRgdM2XNJdw==

uwE7ed9xxFrtbgbtUim4TMWimQ==

Signatures

  • Formbook family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_9059c4810bce97a830fcf0c57bfc929d38e01017ae7e0e7802c75940df4edec4
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections