Extracted

• • Target

    43aa5e8b27546106dd66c0dae83c5f59_JaffaCakes118

  • Size

    1.5MB

  • MD5

    43aa5e8b27546106dd66c0dae83c5f59

  • SHA1

    c55656ad4fad7217f1a0e71dd9e13102039eff0d

  • SHA256

    e3639a291e120d2ac06f722f0da51fd842cea6469339208ef0ec6e7edf84e310

  • SHA512

    b212d6a85571d2f9a6dc5f1a276b5d02ca117e075b3c910a0be53c219da0a2b4841a27abb4d04b6e178f93ba5374123161bb9ba7f751e4fc081f800dd156a21f

  • SSDEEP

    12288:Oh5E394sjPBi/7Ui9rI9jGoaft/VEMv/ZkkDOEVTQ6H+Uy1Susr8MmH3jr:FKo8UimctdEA/ZkceZZS5R0

  Score

  10^/10

  xloaderuisgdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2