Extracted

• • Target

    d4e0768ec86d2f8d8b6a6b725bda4b87_JaffaCakes118

  • Size

    835KB

  • MD5

    d4e0768ec86d2f8d8b6a6b725bda4b87

  • SHA1

    4bd5d2c5c06e38cd70a18e4a99c16e0f1f841dee

  • SHA256

    09c8bb08807219149a78bfa1e239f5022e6eb2e802f87dffe87d0bcf16e483a8

  • SHA512

    f135e550defa90c4fc7d750628aae850405107998f6af9ebcb89b42ba26d3c977f37caff7c694db5617ada189872332dcc5175dd10d1c08e64cad7e3146a0f9e

  • SSDEEP

    24576:7iszFFV90kSaUdGAMVb32G6TVjuDsJ8BDeL+cLaA43DBDErHueXsS:1T

  Score

  10^/10

  formbookphdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2