Extracted

• • Target

    7cddf1b4905e46dd785a85292103ab4c_JaffaCakes118

  • Size

    1.5MB

  • MD5

    7cddf1b4905e46dd785a85292103ab4c

  • SHA1

    c35fe73cbb6daf239da1fc6aa4e8bc523f77b73e

  • SHA256

    2629aee2f9e5b14c601e50722bf87a7a31c7403b4c89f4d34961ec1ca214f450

  • SHA512

    7ce87ef63d848a2e080c5ccc1a5e81713673aea0c83aa26c53b09e8cc0c01297c023681466c00e13ffbc8b67447f16dc36f91b9f603c1bdb8e85f6339aa910f0

  • SSDEEP

    24576:gjclZDgmKRazSuRv7qqwxpTN7Si8iRQAu9L8VChrEcL35zm9nS71C7KVoEW:gjcldgmtrv7qlpp/WAu9MChrEYpCxS5r

  Score

  10^/10

  discoveryupxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2