Extracted

• • Target

    5059afa08a5b7ce112211bcd839210df_JaffaCakes118

  • Size

    5.8MB

  • MD5

    5059afa08a5b7ce112211bcd839210df

  • SHA1

    a2b7de6b0765e2e6df51c6f4faa29ba004645096

  • SHA256

    607da1eddeeec9b7f32c1acb6d0e497d38baeb36133f3663039d62814850a4b8

  • SHA512

    fdd745aa7f5d89bbcd9691b219dd56b8fa88180aa450dcd19a092ce3465e352c1b2b253ee04cc49b4931f37a89dfccbf7ac7d19701b96194664e816637c5c026

  • SSDEEP

    98304:KTIM9WX39DcS0HdU3Hau42c1joCjMPkNwk6alDAqD7z3uboHau42c1joCjMPkNwv:kNU3h0Ha3auq1jI86FA7y2auq1jI86

  Score

  10^/10

  discoveryupxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2