Extracted

• • Target
    3d76b5c0f9611f01f44c3a74e1aebe69_JaffaCakes118
  • Size 483KB
  • SHA256 720ffc99aa96c665aae27db46f776476c37ca113db207790579adfd81c73ad05
  • MD5 3d76b5c0f9611f01f44c3a74e1aebe69
  • SHA1 e6c2986ec30242d93d85f47d1a9922d080e00ad2
  • SHA512 5014ee087f6a4ff56edeb80405e2d4e56928495b6f351ba27805f074c330b4f130b5228d00d31bfcf75102376c98cf643958aca8b1e00acafed0ace16513c39b
  • SSDEEP 12288:UFda+Fda+EMYLysUN8dR6q5T2ComsZ4UyDZ0dOaAf:UEMkrdRLdho1aJd
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookbf3executionratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Beds Protector Packer

    Detects Beds Protector packer used to load .NET malware.

  • Formbook payload

    rat

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2