Extracted

• • Target

    f4e4443c77bf815f2da1b086947dc456_JaffaCakes118

  • Size

    78KB

  • MD5

    f4e4443c77bf815f2da1b086947dc456

  • SHA1

    b3bb1b3a586617218c9a3620e620b100739e35f9

  • SHA256

    fec2cfee6d8a10abe3108547411c948e172b333ce8c0ea4d6b80229631532402

  • SHA512

    4b94f0ba1b583c85850c2222c8ea482ffa01b45bc4a268a99fbe7f4b06e7d2edd7b5c6b213458d3c89d0568334e6911613a7547cb90edff27b53ec3347375aa2

  • SSDEEP

    1536:n7Bxywk+X9UR+ILEY1RX4pH9HopvB7WqsFa1dilOBtX:n7B8NoBuROHhsWqsFa1UoBtX

  Score

  10^/10

  goziadwarebankerdiscoveryisfbstealertrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • ACProtect 1.3x - 1.4x DLL software

    Detects file using ACProtect software.

  • Loads dropped DLL

  • Installs/modifies Browser Helper Object

    BHOs are DLL modules which act as plugins for Internet Explorer.

    stealeradware

  • Drops file in System32 directory

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2