Extracted

• • Target

    77965eb6db12a4a4ff7286556b742fec_JaffaCakes118

  • Size

    5.8MB

  • MD5

    77965eb6db12a4a4ff7286556b742fec

  • SHA1

    8808087cda2daefd4bc45c69a706bb219c1a3458

  • SHA256

    92ee4a3949a2b78273e7f5a22d411e3895975b20f1e482ef409c31444b849df0

  • SHA512

    80bbed5f17e2c41d894d6b2227c1668078800b41a7eea7baf26cc04f22da55417c933e0de94242905b511f12ab3ad17f88c6b58e871bfe7f7bcc977f7d7058e5

  • SSDEEP

    98304:OlF73GX+M3IMOY99OHau42c1joCjMPkNwk6alDAqD7z3uboHau42c1joCjMPkNwv:eM+AIMOY99Eauq1jI86FA7y2auq1jI86

  Score

  10^/10

  gozibankerdiscoveryisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2