Extracted

• • Target

    754ba26e13a3d15d6197d979a844f023_JaffaCakes118

  • Size

    2.4MB

  • MD5

    754ba26e13a3d15d6197d979a844f023

  • SHA1

    cac4e18460aef24994519ca703eadee36e474d34

  • SHA256

    8e95066942b988b06903b43a8c2c3ce15678b534721c9e2cdd344f040f734ee8

  • SHA512

    8f3928d6f1d95930ed1c9fc9bd7672788de390f18a68ffe7d7a2788e0bdf62eca20ff04f5ac29f0264819af6c50b9c4cfe9ece49f58a2bd2e10cc5e677e13b3f

  • SSDEEP

    49152:bCd/n9/SFcWDUiTj3IlB8w6P4M338dB2IBlGuuDVUsdxxjr:bCp9/NB8w6gg3gnl/IVUs1jr

  Score

  10^/10

  discoveryupxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2