Extracted

• • Target

    f5446a937202a5ebfb92665642b84636_JaffaCakes118

  • Size

    2.7MB

  • MD5

    f5446a937202a5ebfb92665642b84636

  • SHA1

    b78eeb96885a20f50fa18732b8269c7ce1b3e291

  • SHA256

    68c8c71f7e83eba2777f568d77f833422aa278972650e93aa48d78d00c2aaa09

  • SHA512

    bf0326ce6e528ec2de4f8a3548d6af366f8d030cb4c6d561fdef7fcc79857256cbb1f4a8a18ededbd1f57d4726a1022b2e94e96ac817bc3695bef10814f7e63a

  • SSDEEP

    49152:diWURLwZRBkIAair2eJ+QhNEm9KR9VLU+1q5lW9mflSDSwkuR9j:87MRaajah6mIHhUPAlkuHj

  Score

  10^/10

  gozibankerisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2