Extracted

• • Target

    685ceef89658488ee233348b0e2d37a6_JaffaCakes118

  • Size

    1.3MB

  • MD5

    685ceef89658488ee233348b0e2d37a6

  • SHA1

    97e1ea35428b5fa9897e06c1af14b48408932401

  • SHA256

    1dfee98ffe0d39be5303f516b058b2466e078a2dd99332ac775dd09170d0c835

  • SHA512

    5e3bb335430220650458dfaff6e43f2724426816c235d3c6547102ae437edb9a6931f1c2d8fa9e454567c433abc95e1f71cc0df0e457e7ca73965c2cfbdd0083

  • SSDEEP

    24576:SF8c/sqWSEI01fkqjXwbk1A+mVDYpk9xpb6cy1yZyvG:88NqWSEICsnb4A+4Upk5bbay

  Score

  10^/10

  discoveryupxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2