General
-
Target
cfd7042d14cebab051c1a501278fbe90_JaffaCakes118
-
Size
2.9MB
-
MD5
cfd7042d14cebab051c1a501278fbe90
-
SHA1
ad96f0bc14f50002c1cc6c59ab2accc673587a1f
-
SHA256
8739858213621166229ae67f37d2afecbb0b9f7e7328c1ad3a9be08eca38af1e
-
SHA512
5e8711521f3a04773cbb29ffd563d459a44d640962e9247530150dcd5aacbf044fa7f6e16db6209247a53a9e2991d19d594236f932153715f04f9a62c9ef2dad
-
SSDEEP
49152:vQ/wFmaeCj/E24Zcyks4emAZXImb7EZOP4M338dB2IBlGuuDVUsdxxjeQZwxPYRr:vriCj/ckj3U6Egg3gnl/IVUs1jePs
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cfd7042d14cebab051c1a501278fbe90_JaffaCakes118
Headers
Sections