Extracted

• • Target

    19e4c0e192b1966e105f7cdc815d4861_JaffaCakes118

  • Size

    877KB

  • MD5

    19e4c0e192b1966e105f7cdc815d4861

  • SHA1

    201261501086a6ca7511206ebf17232af50706b8

  • SHA256

    e2ab98687c215cc7f4e84d11bdcc6a83d797944132901cbbd6b1c23a47efba08

  • SHA512

    9bd0a604aa0df102503e7bf9b5b70c8b7740a365009e3755ed3eca4f8da85568ed6c1fe9810f734096c667705fc1c5d3c1fe4369d47912fd90c50aeb81b1a641

  • SSDEEP

    12288:YVqGUslKAn3qGaNHEyC9/oR9gy5FHK7zcRLL+UVdgYjksp/4e6xrZ9dh6tLxgvvl:YnKAPp9AR95yOLL1jkwg3xVl6tu1

  Score

  10^/10

  formbookchaddiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2