Extracted

• • Target

    JaffaCakes118_f55f34179b9927413e1b8e03428219b5

  • Size

    519KB

  • MD5

    f55f34179b9927413e1b8e03428219b5

  • SHA1

    6794de0e21b2dcf6844e6c27d7391105ee9bf1ef

  • SHA256

    9266ece6d7847e789355c680f49e4eb1fed2417e88b9fbd780e76e5f3ffcab33

  • SHA512

    079e23fd13c75923c1510b35b8c8559d774982a5ce991483bcb6d2e0a8f6b0870bd5eca57926acedbdfccd71249148f26e76b7fb353673c2076678f60a20570f

  • SSDEEP

    6144:2i5IN9bX6qUhFFGzaX/yuWUJeLC5MiTMXp6LNXlTEGtxhezzK3iU8dEHK:2i5ID6qUbFhyAXocLNNVtuXEHK

  Score

  10^/10

  formbooks6tndiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2