General
-
Target
fb7898e9f45717d479df6332bd4cb19d_JaffaCakes118
-
Size
11.7MB
-
MD5
fb7898e9f45717d479df6332bd4cb19d
-
SHA1
ea66ec5d76d4cf0fdea6b1c478a223af385769ae
-
SHA256
3c7d78faec2914fb81a05345c3634e63cb608ee6cfdce8ba6c045da1f55b6347
-
SHA512
e0e0c8cd5ff795feb3a41f346f37d70099e4be1fb01416127e11dcbb3045a5cf1a9e4abcbae9134979275fcbca3dbd9d12611cddb96e45a48574842f4dc6901a
-
SSDEEP
196608:dByi3eXxUyYTgl/iBiPidhaQYgl/iBiPF5H4Pgl/iBiPidhaQYgl/iBiP:dze/s2iE2iuO2iE2i
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
fb7898e9f45717d479df6332bd4cb19d_JaffaCakes118
Headers
Sections