Overview

overview

10

Static

static

10

f99ea5b4d4...18.exe

windows7-x64

10

f99ea5b4d4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f99ea5b4d446d20733e4af214e46e468_JaffaCakes118

  • Size

    1.5MB

  • MD5

    f99ea5b4d446d20733e4af214e46e468

  • SHA1

    61aa02db6d449e3a7e48e6444ca5cd4a1252d5a2

  • SHA256

    735a8faa01d9c722b3c1d61387947602255a29ae5dddb4ae4b1cffa9b07d1804

  • SHA512

    db4858d7c53e5b54c11341f5bef90ff4f6780400d8920a04330a6040c5fa3731475ad4b445beb277e85c43e8ce21d7c7da130a35a30569f550247ae4836a5aad

  • SSDEEP

    49152:gGS5jLBPhuL/tj/UbEeQt1DVa4OoXQFmd63jw:gGS5jL4jcges1DVLOlmd63

Score
10/10
upxisfbgozi

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
    gozi
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f99ea5b4d446d20733e4af214e46e468_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections