General
-
Target
f286c7faf7ce888a16d99ffb74ba8d7e_JaffaCakes118
-
Size
5.3MB
-
MD5
f286c7faf7ce888a16d99ffb74ba8d7e
-
SHA1
528f5c124642578b7688ac4bb0e76a3fe04fd2f1
-
SHA256
796402a2ac924bb3928bb0dce7923013d336b910c2f4276ecb40c9ae4655b58d
-
SHA512
a03094927f1fd8ca975c2f327aafe989c020d2ecb62bf2939492bb27269a46dcbc6a805f91442a62ebc23735a1de3737bdcb5077f42fa389ba3567b0aac12eeb
-
SSDEEP
98304:GBQ8hbQN8llEjwDTP0r2hUedIod96yQllEjwDTP0r2hUe:GB7hbQNIaUiLeyaUiLe
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f286c7faf7ce888a16d99ffb74ba8d7e_JaffaCakes118
Headers
Sections