Behavioral task
behavioral1
Sample
a91147670d04dc3ec65a44a53a025484237456370a21a4215fab94ab56c3a361.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a91147670d04dc3ec65a44a53a025484237456370a21a4215fab94ab56c3a361.exe
Resource
win10v2004-20220901-en
General
-
Target
a91147670d04dc3ec65a44a53a025484237456370a21a4215fab94ab56c3a361
-
Size
372KB
-
MD5
32626325b3b5c54be1ff12bf3df0f091
-
SHA1
65f4d2dc8c07cdc26029e4fcd3dc9588a7c85081
-
SHA256
a91147670d04dc3ec65a44a53a025484237456370a21a4215fab94ab56c3a361
-
SHA512
0621cb5461c138f332cfe9087dbb3d895364cb2cabb720dc5cee8caf50b00d6f4973a5fb04a7f441a680a9aa27831ead6256303dc2dc4658f45e76665979de8c
-
SSDEEP
6144:NoFXtijKVzQstZq5eGIZiI6yaRI0uP62ctloaeH+XzzFqG0sKfpYT:WFdYK2si0GIZR2RJuIoaeH+XzzUG0sMi
Malware Config
Extracted
gozi
Signatures
-
Gozi family
Files
-
a91147670d04dc3ec65a44a53a025484237456370a21a4215fab94ab56c3a361.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 334KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ