Extracted

• • Target

    e79bd8b4aa11afd86c932fa441d6544e_JaffaCakes118

  • Size

    475KB

  • MD5

    e79bd8b4aa11afd86c932fa441d6544e

  • SHA1

    eea8d0048c7b4ae55127665b5e6991a112dd0c32

  • SHA256

    d1a6eb1637a42a3098f5b0ecbfdcb7011422cdc110a9d481043ddc964cc49cb1

  • SHA512

    17b93470ab610ffe5b968d86e1f9a46efa50142005e60bda8de85d1a4f56df09ad828337b7bf84f9fd0aaa40b4bc4157877ecb7a0c365e1f86dbb0387a3fa705

  • SSDEEP

    12288:a5qGhlH60YUkNEB3ZjkeZvz4MhXUyHKjedkt+cTpPRuusB:aD6QP/K2VB

  Score

  10^/10

  formbookgtldiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2