Extracted

• • Target

    902c3dc4d90c182eb72ad0880f796db8_JaffaCakes118

  • Size

    923KB

  • MD5

    902c3dc4d90c182eb72ad0880f796db8

  • SHA1

    6d2b00e8fc02413a15b81f16fba84d3301a1495c

  • SHA256

    e53f5cf159f53775b3adcca1a82b98ae91a9c8dc74fbb0f376df20217cad6d83

  • SHA512

    a94645fd2d2e26ab45dc1e3879b9ac08ea06f8d08f37490c7068caea1790cf306207e58892624623bb41576a0915e79159ed1165870f1aa88c06e20d484bb0f9

  • SSDEEP

    12288:EAIv8UTrDORFIjAPy1Ts3rbCapCh36Rh8lbJPJbqtBdcxsAXPjHK7zmzKbojReF:4vzfEW2yZs3rbC9qg9JadusLwKboM

  Score

  10^/10

  discoveryformbooki6sjratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2