Extracted

• • Target

    f8febc5ef6d06287958f59fdad7684f2_JaffaCakes118

  • Size

    316KB

  • MD5

    f8febc5ef6d06287958f59fdad7684f2

  • SHA1

    fbd6fa881ef273c75467e461effbf6ca46b0d916

  • SHA256

    3c68285c9fa16c73c5e421f4189afa8e32a211720091fa44952a835371790e45

  • SHA512

    3d33430485ea114b1c9fca62258a32784f45a803690633f65edd6f2476a290e896a63747ce6d03d016440bf20f10acc37af9855761ad8ef9bea47bdcb73f46d3

  • SSDEEP

    6144:62HPYyotyounyNnbW0iUKQ/+M0mIsHi2azRhZmi:bHmcouyNbWmKe0mIT2az3Z7

  Score

  10^/10

  formbookaiagilenetdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Obfuscated with Agile.Net obfuscator

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet

  • Suspicious use of SetThreadContext

  behavioral1behavioral2