Extracted

• • Target

    f84e59e42690ede739531d41ebea3d07_JaffaCakes118

  • Size

    712KB

  • MD5

    f84e59e42690ede739531d41ebea3d07

  • SHA1

    03544033cdd8cf9c911e3bad6095da4256495606

  • SHA256

    a42fcf07a49813ee9169d0c3e69fd3b7dd98a2d3316d9861dcc8de4caa7487cd

  • SHA512

    0155f02751e5dd487e4550ae52fb0d1d4e0a205ae1f250920150bdab495e909ccb47b984645d915b37a4aea8f39bcef5ea50c89d8810fc10e99aac842991a9e9

  • SSDEEP

    12288:IFfumitB/fZhhgDweuBiMkk5i5jcQnmQ9AuchIOixdTVIzUUP1AUnzUSM/:IFWXzePuUMkB5jcsmQ9A5jiPWzZ

  Score

  10^/10

  xloadern58iloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2