Extracted

• • Target

    2d25d75d5b065b3f83a6ccb0ba3fd6a1_JaffaCakes118

  • Size

    5.8MB

  • MD5

    2d25d75d5b065b3f83a6ccb0ba3fd6a1

  • SHA1

    8c197c6f543c3548dafdde9b3af814cc6ae19b03

  • SHA256

    98b3b22f97e45fe22e10464bb6f1b4b138fe6cb4a43348e22dda0f5a730e06c0

  • SHA512

    5389a03abea36747a94456e37cfa5da21b1db5f2a834efbd47bf3c3e182af0ba9976b3801c25d0c6a7d0516316feec7cd6e3f8629e53b4c149f72c9c2724b62d

  • SSDEEP

    98304:b5r+59JtZWRZt9Hau42c1joCjMPkNwk6alDAqD7z3uboHau42c1joCjMPkNwk6:ta5hZWRL5auq1jI86FA7y2auq1jI86

  Score

  10^/10

  gozibankerdiscoveryisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2