Extracted

• • Target

    eafeaede0846e113be2b5deee22d336d_JaffaCakes118

  • Size

    177KB

  • MD5

    eafeaede0846e113be2b5deee22d336d

  • SHA1

    7d2e7426f53ccbae25461c2c43c8cc96683ee20e

  • SHA256

    1333b96981052d2c51c9a49f4190e5df643358df419c0a614d814fab69b0b5ee

  • SHA512

    b3369cb59c496d8af405324f355971d5075089b1c046e36568593d8915f7e962f5e588a8e6fd607fc212afb253915c601b26e78287df75a7bd9aa81b66b4c5ca

  • SSDEEP

    3072:o2bdgZfYA6mSfmBEvoau1Uhc7ZJsKdUAgV+dSn24/9frUQ7z6Eul6EgC6LHw:DbCZwA6FKEvBu1UhcFC14QV/drn6/x2Q

  Score

  10^/10

  gozibankerdiscoveryisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2