Extracted

• • Target

    91d48d915e288d5dab6ca5c79ea8e7de_JaffaCakes118

  • Size

    268KB

  • MD5

    91d48d915e288d5dab6ca5c79ea8e7de

  • SHA1

    41bfcdad8ac7e7441c09434ffe788b15e546f609

  • SHA256

    d72a129c1931ff9695e5113675b6b3284ed3a07dffe5d62cc68952839852b0ad

  • SHA512

    636a0f7debc24ffa2b0ba24a836a298dc4b934d53778ec3c5851ea428aa0c31473dfabcbfd5ad5837079d204afa7b6118de05fa2e4f493662d36066a32b3d1c5

  • SSDEEP

    6144:uGzju/iAilN+gxlZjUcK2nQg66hUYmuggfwvBRljqzs:x8iSglZjUcZ566hVYpRl2

  Score

  10^/10

  formbookch12discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2