Static task
static1
Behavioral task
behavioral1
Sample
e3fb27a6761d3a9403ff5b3ddbc86e5231664980149c8fd85bcfb319cc1ebb8c.exe
Resource
win7-20221111-en
General
-
Target
Gozi-URsnif.zip
-
Size
257KB
-
MD5
3b3c0da2aa2fcd62301e6d07e5fb4ad6
-
SHA1
7358678f3fdb05b4e6ce595086bc29d145f4db20
-
SHA256
91ee924a40cd942071b7362631890d50074f5ed3fbe30106a86b0710751a3e87
-
SHA512
1bf30f8d52d6ea0bde5ec47ad2a2502f8f4bd119f7f2aa852ce5ec4b8cc5520f12bb8a51106bbbc7078e23d92fca948ec23e279fcb5ea60162020d0670bbb499
-
SSDEEP
6144:wKHBBWlmeQL+RBspSDyT0yN1rZbPXA4rr18o44l3cwap:weBjfL+RBspSDyTF1rRX1rqlws
Malware Config
Signatures
Files
-
Gozi-URsnif.zip.zip
-
e3fb27a6761d3a9403ff5b3ddbc86e5231664980149c8fd85bcfb319cc1ebb8c.exe.exe windows x86
3743526d94457fb013584724635b7f97
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetProcessHeap
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
HeapReAlloc
HeapSize
HeapAlloc
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetTickCount
GetStartupInfoA
SetHandleCount
SetStdHandle
CreateFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
ExitProcess
GetModuleFileNameA
RaiseException
RtlUnwind
IsBadReadPtr
HeapValidate
GetStartupInfoW
SetEndOfFile
CreateFileMappingA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DuplicateHandle
InterlockedIncrement
GetCurrentThread
GlobalFlags
lstrlenA
lstrcmpA
FormatMessageW
GetModuleHandleA
SetEvent
CompareStringW
LoadLibraryA
lstrcmpW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExA
WideCharToMultiByte
GetCurrentProcessId
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalLock
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
LocalFree
LoadResource
SizeofResource
FindResourceW
FreeLibrary
GetDateFormatW
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
lstrlenW
GetModuleFileNameW
GetProcAddress
GetAtomNameW
GlobalGetAtomNameW
GetLastError
SetLastError
MapViewOfFile
UnmapViewOfFile
OpenEventA
GetVolumeInformationW
GetSystemTime
CloseHandle
VirtualProtect
GetSystemInfo
LockResource
GetTempPathW
CreateFileW
GetFileAttributesW
GetVersionExW
Sleep
LoadLibraryW
OpenProcess
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcess
CreateProcessW
GetCPInfo
user32
GetWindow
GetTopWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetActiveWindow
DispatchMessageW
GetSysColor
MapWindowPoints
LoadIconW
RegisterClassW
GetClassInfoW
CreateWindowExW
RegisterWindowMessageW
ValidateRect
GetSysColorBrush
LoadBitmapW
FillRect
DrawTextW
DrawTextExW
GrayStringW
CreatePopupMenu
IsMenu
CheckMenuItem
EnableMenuItem
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuItemInfoW
GetSubMenu
InsertMenuItemW
ModifyMenuW
SetMenuItemBitmaps
LoadMenuW
ClientToScreen
ReleaseDC
GetWindowDC
GetActiveWindow
GetDesktopWindow
GetMenuCheckMarkDimensions
RemovePropW
BringWindowToTop
InvalidateRect
IsWindowVisible
ShowOwnedPopups
GetCapture
SetForegroundWindow
GetForegroundWindow
LoadCursorW
SetWindowTextW
SetRectEmpty
SetCursor
ReleaseCapture
LoadAcceleratorsW
TranslateAcceleratorW
DestroyMenu
ReuseDDElParam
UnpackDDElParam
GetClipboardFormatNameA
GetClipboardFormatNameW
SystemParametersInfoW
PtInRect
InflateRect
GetCursorPos
GetClassNameW
GetWindowTextW
AppendMenuW
WinHelpW
TrackPopupMenu
GetDlgItem
GetKeyState
GetAsyncKeyState
RegisterClassExW
GetDC
GetClassInfoExW
DestroyWindow
GetDlgCtrlID
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
DefWindowProcW
SetMenu
GetMenu
GetMessageTime
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
MessageBoxW
GetWindowLongW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowThreadProcessId
TabbedTextOutW
PostMessageW
SendMessageW
IsWindow
UnhookWindowsHookEx
PeekMessageW
PostQuitMessage
SetFocus
GetClientRect
FindWindowW
GetFocus
GetMessageW
GetWindowTextLengthW
EnumChildWindows
ShowWindow
UpdateWindow
CallWindowProcW
GetMessagePos
GetPropW
comctl32
ord17
ImageList_DragLeave
ImageList_BeginDrag
_TrackMouseEvent
comdlg32
FindTextW
GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW
ole32
StringFromCLSID
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
oleaut32
VariantInit
VariantChangeType
VariantClear
shlwapi
PathGetArgsW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyW
SetThreadToken
RevertToSelf
OpenThreadToken
winmm
timeBeginPeriod
xolehlp
ord7
imm32
ImmGetContext
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
gdi32
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
DeleteObject
SetBkMode
RestoreDC
SaveDC
DeleteDC
Escape
GetTextExtentPoint32W
TextOutW
GetPixel
BitBlt
RectVisible
PtVisible
SelectObject
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
GetObjectType
GetStockObject
GetObjectW
SetBkColor
SetTextColor
GetClipBox
ExtTextOutW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
shell32
DragQueryFileW
DragFinish
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 429KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ