Extracted

• • Target

    ce0e01fd8d3070f09c33a1346e43a711_JaffaCakes118

  • Size

    1.1MB

  • MD5

    ce0e01fd8d3070f09c33a1346e43a711

  • SHA1

    985cbc20e293cd32340929ef2de36e18700a3fcf

  • SHA256

    edf20bb235ae7ab72ec821f7aaadeb7303abafbc3dc2c8cb17449744d8680dd2

  • SHA512

    54d64f10efe11421cdd37ca488aa02948a9c3c778eb6f848a22dbd79c5021f5960ede259b736873e93661f954b17ee19423ac076495b7b4c66d6ea3de93e2a8f

  • SSDEEP

    12288:JSR/nSvlzri7ahRbG4YY7Awj/QiPgzTq+xwY/NYs+NL/5nRg:oR/nA1ricb17PGq+iYSljC

  Score

  10^/10

  formbookvrsdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2