Extracted

• • Target

    JaffaCakes118_188a0c1b3179c00fa189e73b772dcd72

  • Size

    417KB

  • MD5

    188a0c1b3179c00fa189e73b772dcd72

  • SHA1

    efa12177184000acf7236187b9582ba204ac1387

  • SHA256

    0997b2cc23e6aa9743c78ccaba88fb036bc03937011a12bbb367e6b457461c0b

  • SHA512

    8feec5cadd9710eda47653eb26041c99b7915d5a664f90b9daabfddb65651be6161c9b21bece2943c8d8ae54a1ec44f6aaabbb1bd964791abe3cc020d771bad0

  • SSDEEP

    12288:Awhxe47sMXuMCIy04qtaOhv+AlicO/xI/SbVJ50D805V:Aw3H7drCI4qtaK+Ali9e/SxJ50

  Score

  10^/10

  xloaderwogmdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2