Behavioral task
behavioral1
Sample
09a9043681c5eb5e79e974a51f0f03edb4b09db7a916c146a97fb501896350b9.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
09a9043681c5eb5e79e974a51f0f03edb4b09db7a916c146a97fb501896350b9.dll
Resource
win10v2004-en-20220113
General
-
Target
09a9043681c5eb5e79e974a51f0f03edb4b09db7a916c146a97fb501896350b9
-
Size
52KB
-
MD5
7159b4111de1095b1c0bb07e201e43c1
-
SHA1
1240614f5241e1383320900382695e8d211f3383
-
SHA256
09a9043681c5eb5e79e974a51f0f03edb4b09db7a916c146a97fb501896350b9
-
SHA512
39f73611213b118bcd52d385bd94324ec6b66dc5d711ef4c52fc865cf3cf0f946400a04368e506d0edd2a1e4749312b0cf745783df93ceb3f032cf65d8504341
-
SSDEEP
768:uhU/fM7rcvgtWjVK0VlGudcmjVjCHkatBLlod74IK8G5+A4Y:Lf8NkjVnVlHdc2VjWkwhUlKd+TY
Malware Config
Extracted
gozi_ifsb
1500
gtr.antoinfer.com
app.bighomegl.at
-
build
250211
-
exe_type
loader
-
server_id
580
Signatures
-
Gozi_ifsb family
Files
-
09a9043681c5eb5e79e974a51f0f03edb4b09db7a916c146a97fb501896350b9.dll windows x86
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ