Extracted

• • Target

    52800ff51815328d40423b05573a6311_JaffaCakes118

  • Size

    607KB

  • MD5

    52800ff51815328d40423b05573a6311

  • SHA1

    e919ecce564dadc8cb577f74e224c54820e5f4ed

  • SHA256

    4136247829572b4210102e01bef684b8e5cbc8ebd9d8dc6a87de79ca62a51630

  • SHA512

    e9cae9108feb4a5053b535d9bac35628a5482702b164c8916e2a452fe83818a573ceb69145e2640a9de15814b01ea6f34d645a20f82b5855339e13bbc9450d8e

  • SSDEEP

    12288:OwijcvmXR+nin+nin+nitOiwNODrDZVadZOA8yS57B6urbKGn+niu:OwhOXR+in+in+iMi5DhVQ0ya6urbKW+i

  Score

  10^/10

  xloaderbw82loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2