General

  • Target

    032c65b1bf312ba8244cff6c94c06d74_JaffaCakes118

  • Size

    7.8MB

  • MD5

    032c65b1bf312ba8244cff6c94c06d74

  • SHA1

    97a8509fcb423d0c6556cf94a0ad37acb1af13a2

  • SHA256

    1f66f83d4e61379b5979811f38bd65f5d6f004f925581d708d64b9ad15e57dee

  • SHA512

    45c674fcf03accc0ad9302747e4baa3274e3255f056964e0313f63f91a524943df59b7e8fa24707af53771db305e46499ed6392038fde0935effa4d52ada5ce1

  • SSDEEP

    196608:FvKT8lzgl/ib3zMF/Ogl/iwwvgl/ib3zMF/Ogl/iG:Ewz2qzqO2ov2qzqO2f

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 032c65b1bf312ba8244cff6c94c06d74_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections