Extracted

• • Target

    3bb1bed04b14c0cb63dbf910a5bc3528_JaffaCakes118

  • Size

    688KB

  • MD5

    3bb1bed04b14c0cb63dbf910a5bc3528

  • SHA1

    afc97fc9cef9357f783e45489f0125ddd66fa52b

  • SHA256

    66699c8f4a4f0be5c62dc4b76a719babf30cd88a0716b575ad56fd0070753c7c

  • SHA512

    74f5d51679e0ad701a765fbdf93bf7cccf995f804b134ca8fceee6ce95358d8a69943f8c840b401030597480e1192b5e9dde3f2bc15a0dc5e32e139ab1915d25

  • SSDEEP

    12288:6Zi9709qhxAySXmt5h/mgEgQgkiQ8inucai4mE3UhDpV0qZ7AYuCBm:6Z2Ahmb5rE9mqOA1yk7AYuR

  Score

  10^/10

  formbookxleratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2