Gozi_iTunesHelper_221122l[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Gozi_iTunesHelper_221122l.zip
Size

63KB
MD5

5f22ad22a76f7d6e0afc548f209258e6
SHA1

18eb94f8e94d7c498556f51e81f756365bb03813
SHA256

b2e9bc55b95a64a5bb4154e016159ff6315dde16b1c2d3b1bbca34277f46344b
SHA512

7d2f9475ecf383c68f6e7b489147018a702d5a6a550efb536e6b8a92d550cebe19856b50096a7c19d3e3101740817b82d482e5dc019918e1b55d275c4c45f587
SSDEEP

1536:oBswCXjlvBvjNjnijot8LFH86xTjRP64xP0XWS4WHW1rCm6pN3B:oHuJiECpjjhxMXWU212meB

Score

N/A

Malware Config

Signatures

Files

Gozi_iTunesHelper_221122l.zip
.zip

Password: infected
iTunesHelper_221122l.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ