General

  • Target

    fad8f37c9bd5420f49cfd5960a60fa24_JaffaCakes118

  • Size

    224KB

  • MD5

    fad8f37c9bd5420f49cfd5960a60fa24

  • SHA1

    6c97f91f77e44fd7ada5d09e2bed16744a3efcc3

  • SHA256

    b41747714910cee5eb306f61dfa61dd5c3c72450a60fc36280b8d7fd0643b54b

  • SHA512

    e93ead6e855994c1024dba6a259b1630d6d247f639887877b8d47ddf4c7f42809fe903d4f185956f9f8b12b18bcd27d38b1c0c0ca87a4c7fc5d0056b226121a2

  • SSDEEP

    3072:t78yHpYetDrHNsbqrf29rGHWwsMr7w2nu+PpAgxs9D/sv9Z:t78yHp9rQ85RZr0ku+cD/cZ

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fad8f37c9bd5420f49cfd5960a60fa24_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f153d40aef62119483a98c008e07ee2f


    Headers

    Imports

    Sections