Gootloader malware contains a deliberately malformed ZIP archive to bypass detection, but can also be identified by its unique formatting.