General
-
Target
JaffaCakes118_5fd7acec75f49bc5237187efb791d841882aa008430148242fdfbd9255066a70
-
Size
188KB
-
MD5
2d33e82f776342129d6f3e3e9da3bb17
-
SHA1
01b50e27edd0a10ba933261e76579433fb1745d8
-
SHA256
5fd7acec75f49bc5237187efb791d841882aa008430148242fdfbd9255066a70
-
SHA512
6e89776e667a9aa0f9d49babfd43a244d9bf0f6b6dc6c465404798d3a92a10cdb3b88986098982ecddd6558557e3c64d0cf95f2655daf9117e501047bbb83723
-
SSDEEP
3072:ljHETN77R8HG3/A7RzVqmpXSuLyZJ+gC6JWDlgTgDRLq:INWw/mRJqmpXPe3JWDyTcLq
Malware Config
Extracted
formbook
4.1
p31f
a-jinsys.com
nn-blog.com
infotechsolutionsghana.com
jmpjewelrydesign.com
nzenzocafes.com
moemajid.com
masterlending.xyz
darbarfullmoviedownload.online
usaservicedogregistartion.com
bqmjj.com
dienhoatuoidep.com
mttbk-lve.xyz
aamuktivastram.com
doneys.online
coinbasewallethelp.com
qpbtllv.site
edutesshop.com
xa9at1fy4pkupe.xyz
plynkapppcrypto.com
fujix.love
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_5fd7acec75f49bc5237187efb791d841882aa008430148242fdfbd9255066a70
Headers
Sections