Extracted

• • Target

    2afa0d8b9349ba770f5c4e5e0cda5bd0_JaffaCakes118

  • Size

    260KB

  • MD5

    2afa0d8b9349ba770f5c4e5e0cda5bd0

  • SHA1

    a1cd46219893137d02b305f94e3cec4b0777bac8

  • SHA256

    5ee4f7e9fcc0ef5a0887440ff8139d4c3bfb49a64f68592c56b62f53c1149bef

  • SHA512

    38774f27f6107681c082560675ad737693423bb07c688bbf146acf082504f85f954a796c984c7da51d72646f8f736719bb04700e2ca4caa36247ff0461363ec9

  • SSDEEP

    6144:ybsEo93GOOKon+dvQMYy8q2C/w8JPSVk107:DE4GOE+5Qf82kWk

  Score

  10^/10

  formbookch9discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2