Extracted

• • Target

    6d3a9e2fc11322a0a2bc4ad52ba110f6_JaffaCakes118

  • Size

    724KB

  • MD5

    6d3a9e2fc11322a0a2bc4ad52ba110f6

  • SHA1

    ddf89fe6d83c707f636c1b73ac448b9f4b5f9de2

  • SHA256

    6157555f6e84cf18fa58a08cdc89a469da2a1d5d4e3f3b10776c74d2fe007a56

  • SHA512

    b8258516c371ab6e5bd0ade27359ef4f683a8d6bc7da6cb858e69022e4fa5ef45fddfd970218da061525f53e289517794a1caa3ef548ebcf6b6d07d807dd23d0

  • SSDEEP

    12288:bfOkVygaG6x/Oo8hL67HanLgc8tcWJTyHY/GD:bmkkJxAL2HanLgcqcWJG

  Score

  10^/10

  formbookperatspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2