Extracted

• • Target

    dd3f06103f2ac425cf4e5a6dc65d31d6_JaffaCakes118

  • Size

    1.5MB

  • MD5

    dd3f06103f2ac425cf4e5a6dc65d31d6

  • SHA1

    972a1b325cc3abc48a94c90a7b51faea619cfcc9

  • SHA256

    262d8dd389aad1ef11023ded97da5703e88f1a96c2b0b8a1dbdde5fa7ee04022

  • SHA512

    8863a2c6f690d215ddf54476832f0e1a7f539bf0b07013aad2e6b86054f0cd5f6cbc11efd2ef5c9b799a7dce2138d6daa5093f2eae6e15fde563951800836751

  • SSDEEP

    24576:Du1NZfx3LwkwC2uEYY1pSIEiPNMDXiPCxN4ar3DV8bxOpwK:qVfx3LMzYY1EIEiPqzkGz/

  Score

  10^/10

  formbookcmgdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2