Extracted

• • Target

    c634a779375a96eb24ca10886f9c5700_JaffaCakes118

  • Size

    5.8MB

  • MD5

    c634a779375a96eb24ca10886f9c5700

  • SHA1

    c2b912ea2277d9f435f960cd826ad2bdc9e3ac71

  • SHA256

    f5c61561030122893eaec219d4c18952c690efc7ef3ee388ff37afc12ccca60d

  • SHA512

    e106c62baa5c0a15fc64724bd7d032444ed866e9d7b687f2ffe17cda352fe14e949c61118abe944662e704df4774713d56436fae6fedb69f3d5b17befbbe4506

  • SSDEEP

    98304:qtoKxrkq2Tr+bgg3gnl/IVUs1jePscaZofoG1KtGIrQr3Ogg3gnl/IVUs1jePs:qqsrk3r2gl/iBiPSCj1Kcr36gl/iBiP

  Score

  10^/10

  discoveryupxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2