Extracted

• • Target

    a607fddf23be90e4c8e18c53ce9acf60_JaffaCakes118

  • Size

    5.8MB

  • MD5

    a607fddf23be90e4c8e18c53ce9acf60

  • SHA1

    d0686a5a5c566b5281bd432619d8b3236a808005

  • SHA256

    1e27ac2a62cef0f4d2ebbd54fb5e87d07ae1e94b3fe4a37e4e7dbf3ca7411aec

  • SHA512

    49fa6a0687055224d3aaf5649d9586fb1a5588f88fd4363a98f5ff999fac148a06a6f1186b01fbbfa512ff3deddf8eed0d63d6e3b8b21d3b0d5c50617085b99a

  • SSDEEP

    98304:kI7m5vjtVAmgQapzC4HBUCczzM3A0mXlMEiz7PvY4HBUCczzM3:nmFj/gQapdWC0Nl/MnHWC

  Score

  10^/10

  discoveryupxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2