Extracted

• • Target

    db06930b15a011ae389b5ac2dd7bdc76_JaffaCakes118

  • Size

    1.5MB

  • MD5

    db06930b15a011ae389b5ac2dd7bdc76

  • SHA1

    2244a4f2e643dc6ac8366f97117694ffd46b49dc

  • SHA256

    baa0104033934057a023516a0c3e5a28e4a9b27d7f2bb05ce22908a68e9770b8

  • SHA512

    469d340474bda877816aa6f3ef125ffa8470a207478f55fc6cc3d8b4a9436d8119c7c50a964c0a8cd9d2e90d6405c60ce8bed651a32e49678a5c895d346d9ae8

  • SSDEEP

    24576:RSRWHp1uP/NnujRafiNIT42SzXenzBvMjeeAj7YoAje1s9tXdx7jIs6NxxCQW:wkiPFBiNIOwzGj7Q7tA06tX3AgQ

  Score

  10^/10

  gozibankerdiscoveryisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2