Extracted

• • Target

    JaffaCakes118_10f79865e6d977fa0d9f5d4a12ac7fac

  • Size

    813KB

  • MD5

    10f79865e6d977fa0d9f5d4a12ac7fac

  • SHA1

    c05d245928e4c06f1591187d595786ffcb57584a

  • SHA256

    e6cb9330e6bbd16bdd58aac76070200e17389a45c4aead703d4ab970038ff8a2

  • SHA512

    5ba202c0fcf9dbffd0dbf3a1310978469c55a764876eddc2d02e66f01e707890de510a73595d43cf1f6b7c7769b4e2a756abe75d48f805aae34d78d8709b500c

  • SSDEEP

    12288:0swHXdkqRSFdMkuvMNptn0UOxgT2KoxyJ/4cg73t76T1kruzG3+plaqJFTP7ye06:LwHNzovaxxg6KIGfg1O1OmG3klaqvy0

  Score

  10^/10

  formbooksnr6discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2