Extracted

• • Target

    19fe8ffef2673fa450f8681352ca67c2_JaffaCakes118

  • Size

    764KB

  • MD5

    19fe8ffef2673fa450f8681352ca67c2

  • SHA1

    dafe532226e0294e03efbbb7673281e908f83875

  • SHA256

    e7370434b9f351432aca6f30ca4e023db1c642a73bb47d98d95ba357d7ff7e9f

  • SHA512

    d2c8f76eb30f69954144f2352930c2f1607fbc8b64df507d60463c172a24580ea023e8c08323b02598a717e669bd263588c9167c8c2b3c5c06ce784ea9fc6cd5

  • SSDEEP

    12288:lwZiz3334eFEZ1FyrCTHWX+grHMWLK+i0n8A7kscYv2tasGHW:l134eYKrCb/wsuir8utasoW

  Score

  10^/10

  xloaderusznloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2