Extracted

• • Target

    544397a537106f2e9bff18664dde7602_JaffaCakes118

  • Size

    5.8MB

  • MD5

    544397a537106f2e9bff18664dde7602

  • SHA1

    71044a7a1ce3428efa0549e95dd947205f0d8c7b

  • SHA256

    e5e06454ddfa951335c92f3358c547f9cd494a0cb781e89ffff041ac693bcf06

  • SHA512

    febee55de65dbc4d8f2c8091fafa0653f1c75e09155404bcb020cf649079e2da93647e9d03d5e39dceb9928474921e4705002fe97c41f9d9da03435a5b1ea046

  • SSDEEP

    98304:vunfyXYUzmbUHau42c1joCjMPkNwk6alDAqD7z3uboHau42c1joCjMPkNwk6:vyfLQmiauq1jI86FA7y2auq1jI86

  Score

  10^/10

  gozibankerdiscoveryisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2