Overview

overview

10

Static

static

10

JaffaCakes...d4.exe

windows7-x64

7

JaffaCakes...d4.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_75df7fec9064eb711a22cfff709b8cd4

  • Size

    14KB

  • MD5

    75df7fec9064eb711a22cfff709b8cd4

  • SHA1

    e4bfff57eb9d77c246fa5c1efadd7a521d2046f4

  • SHA256

    1a0ec1fc25dcc311a4e4eb67a1a94285b2d9f4ae269cc7abd81044d3683e8a72

  • SHA512

    f9f0f2769aae73c1ab874ba7fedf050781be3a02fb8019f74c60bfea564cf68e9bcf6ff631a20fdf8729cf39072ef9f9aa3f358d59f1eb52d1243489e9b994f3

  • SSDEEP

    384:I0mhBKIRyiUOvPNXekQDTnwbg/c6VbRWtSlbFieNi:I0GEuFUoNMQt+ba

Score
10/10
upxisfbgozi

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
    gozi
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_75df7fec9064eb711a22cfff709b8cd4
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections