Overview

overview

10

Static

static

10

JaffaCakes...b8.exe

windows7-x64

1

JaffaCakes...b8.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3056967c33158159eb9c6dfbaf9b867b32876f24b2fd47fc18d6d6ad077284b8

  • Size

    188KB

  • MD5

    a1eff9b28fd5d3c5b310b8006891d7af

  • SHA1

    2296509e7da3906cb7f845ec6a7cdcbd69d481a2

  • SHA256

    3056967c33158159eb9c6dfbaf9b867b32876f24b2fd47fc18d6d6ad077284b8

  • SHA512

    0dc69338b86e5e798073e52f193b75a35caf949fe46f7f7ab100ad0a76822a0d38af44ea168e46946dd2ac412bb38c2199a81dc399cdc565f270c5f899dd88f4

  • SSDEEP

    3072:E/UhkJDN/MurZR3q++3fQRjEKbIzePXdOXUoQ+amyeGIXUM6sjIi4srraGt:8xnql4mKbIzePNcDlesFjIi4cZt

Score
10/10
ratbn04formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

bn04

Decoy

tmsinter.shop

playfortuna-id.top

cinemagowovuy.com

preciousmomentsevents.net

bestgertijaherusa.com

acger.art

iplayrj.shop

mallmaps.app

hrfu.info

regalospublicitarios.online

sparklecleaner.store

listsmatch.com

awakenthewisewoman.community

deliveryservice-getaddress.net

changzhirexian.top

xyjsq.top

air-bs.com

fusionisticart.com

menosaka.com

tightsafe.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_3056967c33158159eb9c6dfbaf9b867b32876f24b2fd47fc18d6d6ad077284b8
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections