Extracted

• • Target

    b30d4724d5ab3bc79ea20bf0cbd2aa39_JaffaCakes118

  • Size

    314KB

  • MD5

    b30d4724d5ab3bc79ea20bf0cbd2aa39

  • SHA1

    ad14c3583eeb5c8d3bd21ceb7b39e234e0817ded

  • SHA256

    253d9cf32609e691876a61247f172b54954d5b081c1c6b449bebccf5dac43c0b

  • SHA512

    5a70c84237be8faae0fe75e6eacede309748a8895e2bd81dfe5e712c2622e005d325e52c5882ff0c316ad84aba4cf3709c60340972c7e60f62c7e8804fb853b1

  • SSDEEP

    6144:W388JIphpMwAGjARMyE2BzKs6IDTUpCASMqzqgCWQN:j8JFZGjARxE2ksPgQv/+gtM

  Score

  10^/10

  formbookckvldiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2