General

  • Target

    025828dcacd55d53617fec83dcfefb22_JaffaCakes118

  • Size

    6.8MB

  • MD5

    025828dcacd55d53617fec83dcfefb22

  • SHA1

    d02c19b95007a706be59fa3815c26a74e3abab57

  • SHA256

    1d8b8237a55fc99c413d3fc5711c318408267d1ea0d7c1ec89c5d10d5c41e678

  • SHA512

    adf72fee10fb1c4f10496878bc137b8e8227f279fcd1d0c1d5655c11af07e34b3f980e1001c35684ac97e3153046a6e6f25bce5875c0e707e85fa079ea38a19f

  • SSDEEP

    98304:o7+akjAyFdm5suUjui/GRW4Y4HBKL/vaAjkq9FWL794:4+aknuUXEW4YKQaKkOWLp4

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 025828dcacd55d53617fec83dcfefb22_JaffaCakes118
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections