General

  • Target

    9d024f031148895c024fd58c2d4424ce_JaffaCakes118

  • Size

    2.9MB

  • MD5

    9d024f031148895c024fd58c2d4424ce

  • SHA1

    ae69a087a344cef40f7da3fb8e602efc960432e7

  • SHA256

    26d9d5141898ee80233f2f5862b68367426f91d7bf0e2e03bb1f8e94a2550e58

  • SHA512

    24a8f994742b73abf72f1647acd2f5c130d6bc6ec771a310b30370b64b0bc8ad2202aea6337b8e1772838cdc144d023f86a4507427f07cdfa6062d32f78e70d4

  • SSDEEP

    49152:8oX/6e1dKYDTV1So3iv9uoxN74NH5HUyNRcUsCVOzetdZJ:7X/LYYZ8oOB4HBUCczzM3

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9d024f031148895c024fd58c2d4424ce_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections