Overview

overview

10

Static

static

10

b6a59580c9...18.exe

windows7-x64

7

b6a59580c9...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6a59580c919a323cc17c58f40772135_JaffaCakes118

  • Size

    14KB

  • MD5

    b6a59580c919a323cc17c58f40772135

  • SHA1

    851568c08aa3258528272b1fef4614e8e859c2b1

  • SHA256

    6dab84619d25fc3a1e70a234d9a19fbd67b09a2cb5f786ec428a9ad7f26d7c8a

  • SHA512

    5b41a5164a0fa08577c0067cd4a68f3e59c4693f296f8a2c44ea8c0a5b988c66c6a74d5a08e779209a72e09e943e51d9966603cf75aa7e865c950363fb00d3ad

  • SSDEEP

    384:50DmzaUBecFjRpSzqPng1mwGZla68KwrAh7SOnPF:50PUhRCm1qKiAZSOd

Score
10/10
upxisfbgozi

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
    gozi
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b6a59580c919a323cc17c58f40772135_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections