Extracted

• • Target

    f47cad2e129cd235f52b5435ce75c9d1_JaffaCakes118

  • Size

    1.5MB

  • MD5

    f47cad2e129cd235f52b5435ce75c9d1

  • SHA1

    5f217043485810ea6468caddfd1d6415bd654067

  • SHA256

    d7fade466770d4958f11dcc39d8dd20b2713a1fde1aa3e178e4a4295f8a95dc7

  • SHA512

    b820c32c3aa5db73596d6a7d73deeeb501eaa05f2c9f1bcf4294c14f9a92965bd6063576bf28f040f619113f0f5beb238966d7a8856317929c9f45244c6e757e

  • SSDEEP

    24576:vnvjJcZ71vshIgXkznF2gn3JQxsb5l9xPJgFNIkn0xqJKs483TU+W:vnFcZBs/kzEgZFTbPJUtn0xqcso+

  Score

  10^/10

  discoveryupxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2