Extracted

• • Target

    b0c737e8001073fcbd2ff4976f3d7247_JaffaCakes118

  • Size

    5.8MB

  • MD5

    b0c737e8001073fcbd2ff4976f3d7247

  • SHA1

    4587cf15e65f02d755648b721ffcbd2d3a354c37

  • SHA256

    50296d0a9c89d72b9e20b47dce43020575d5cd8f279afc5d0f4ac879c2505f13

  • SHA512

    5e0204d6e7afbc3e3583589724bf56e99676fba0ebff64a93f3f7cee1e98caa455935f615fa4bd8e22235d50314839863b774554bd6f13ea276d37bfbb988ba0

  • SSDEEP

    98304:oqMjDjnNRcM2kGQZaXhP5a9UEI+eG9jAkbkR79D+cVItGQZaXhP5a9UEI+eG:objDjnNGMZGhRaaCkN9qHGhRa

  Score

  10^/10

  gozibankerdiscoveryisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2