General
-
Target
2fc3d87b0de69b41b06db5e06f135e78_JaffaCakes118
-
Size
5.8MB
-
MD5
2fc3d87b0de69b41b06db5e06f135e78
-
SHA1
c28120839a68c7d6e485fe108e0359063b6e61ca
-
SHA256
d84bec88bd4bd63c011014b5a5ac2a040abefd12d5df3b67e841f3570a64e47a
-
SHA512
7800767b6a76605c818d5c5cca6b8be1bf8a3dbffbd1ddde34c97324ee58b130a5e805b42f3eb7dde0a700be6c6dc529bdb23a5dfe71ef15dabcf7dc2dccc3a4
-
SSDEEP
98304:6BF/V8EPp6CI2jGQZaXhP5a9UEI+eG9jAkbkR79D+cVItGQZaXhP5a9UEI+eG:+IMBGhRaaCkN9qHGhRa
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2fc3d87b0de69b41b06db5e06f135e78_JaffaCakes118
Headers
Sections