Extracted

• • Target

    51edb28c6e88b664b566793c16e4148e_JaffaCakes118

  • Size

    2.9MB

  • MD5

    51edb28c6e88b664b566793c16e4148e

  • SHA1

    181d795cc0d382c368bf40008a64c86a2f931f9e

  • SHA256

    420ab4e4f85def207185f3ff7d6790ca5ac9be8557334fcc5d9b8c1451769af4

  • SHA512

    e723405c6e0e38aec9622af17649551b2e3c78adeb3cdb375881905f9d592a2c0b3ff90a9e187ff5c83c8ed2646d911a766a36a061ea7e86d9a95c0da61cc047

  • SSDEEP

    49152:Qviy7DN5XQRkmxHc9l/5/9DGPDfAzP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:xzRkgHcLh/9ODfmgg3gnl/IVUs1jePs

  Score

  10^/10

  discoveryupxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2