Extracted

• • Target

    JaffaCakes118_9c308cf0c5193b3764e892d8cc3f93b9ce20762f918a74cc4f7b07544ab5bd4d

  • Size

    1.0MB

  • MD5

    efdae08118be99a41dddcfb0918d3f42

  • SHA1

    ce3d1472b1f754e5ec0123ecb4d87ccc03e3121b

  • SHA256

    9c308cf0c5193b3764e892d8cc3f93b9ce20762f918a74cc4f7b07544ab5bd4d

  • SHA512

    840c4c1e0f57d00bbb788e2529d95f12b526c6bc75a1a73a50b65a6442306465299c009a50dffae127f70d5178bc4c24866a63f495fd91cd7c3b56c77516b603

  • SSDEEP

    12288:LAGApB+LGjzOQWOxxnDC7nVD4BIaFFEnd0XZ3lvMgTADqjJ5n+pUJj3seT0Ciw2j:LArpBSCWXrV0od0/Vrjr+gK

  Score

  10^/10

  formbookpcbddiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2