Extracted

• • Target

    8113441e8868040031952e2ae38909b0_JaffaCakes118

  • Size

    2.9MB

  • MD5

    8113441e8868040031952e2ae38909b0

  • SHA1

    14bbac47eebf8ffab73c2da6b4252159eb1c5a35

  • SHA256

    69aeab0cd5740933bf79555c6d2c35e493c315079887480d264cfa6a9684092c

  • SHA512

    3554548df63512272e233bbfbd9859e6b2014f6c0ec667b535b6f0224bea7807aa2689686e152a2adc85a997c954a444ba976bf409573bd4339cef84f0d912f9

  • SSDEEP

    49152:mCkEjB52tIG5MNvQBsrUkuP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:m8B0ycHqrUkugg3gnl/IVUs1jePs

  Score

  10^/10

  discoveryupxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2