General
-
Target
8879fdbfc9bc619b562119dcd86523d7_JaffaCakes118
-
Size
5.8MB
-
MD5
8879fdbfc9bc619b562119dcd86523d7
-
SHA1
9b2aa75c5d66446dc686ca4604cdc05429001f34
-
SHA256
88a4c2abc81f7556f21736b7c96ce8001985774d804d699fc20f1231052b52d1
-
SHA512
5878b53b034e56dab40825bc4286a817501a19c25995bea4b2768397bdb70edb4b39e1d22087561ddf81fda6f48b76ff20aa241d839ead90a97dd96cb7bd33d2
-
SSDEEP
98304:7X/LYYZ8oONHau42c1joCjMPkNwk6alDAqD7z3uboHau42c1joCjMPkNwk6:o6Opauq1jI86FA7y2auq1jI86
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8879fdbfc9bc619b562119dcd86523d7_JaffaCakes118
Headers
Sections