Extracted

• • Target

    JaffaCakes118_9eeccc9b585e1ffdf53b20b3d4f4505d

  • Size

    519KB

  • MD5

    9eeccc9b585e1ffdf53b20b3d4f4505d

  • SHA1

    22c8124ad3ad4f39eba59ceae42a1f056b6f7279

  • SHA256

    3c002d7d7bfb83b56c94765d3f1cd9182993dabe4442e8f506fbe76334a01995

  • SHA512

    b19405394b04161ae616f068390df72b11fafd71c03626a081f10c72e77dba158a20baf247c481d34702e72f9b4eedd763e9e7506969ce28289219ff494ba38a

  • SSDEEP

    6144:2i5IN9bX6qUhFFGzaX/yuWUJeLC5MiTMXp6LNXlTEGtxhezzK3iU8dEHm:2i5ID6qUbFhyAXocLNNVtuXEHm

  Score

  10^/10

  formbooks6tndiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2