General

  • Target

    d40cf0a918b38a9645a2a241f99431ea.bin

  • Size

    256KB

  • MD5

    d40cf0a918b38a9645a2a241f99431ea

  • SHA1

    e87b06bb99ebf6a02c12cab7a552c8b31fc75c7b

  • SHA256

    ca4976f2a9490a1547135763eaf83259d2ca4017ca64a8ec00e6218b8889bdb5

  • SHA512

    3c745c2ff9289cdbf900174ded7cf4613066ed70a06b8bf9b821e324953fea6f3be652173ed76c7f771d96beaefd2556bcc0f97662a2b0d83919e4a33773f37f

  • SSDEEP

    6144:db7eFQN9aq3cqt4IyOHJ1wMk5EE/QlSONJVvY/bMsw4LdO8n:db7eFQHaqMqt4IyOHJ1wMk5EE/QlSONy

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d40cf0a918b38a9645a2a241f99431ea.bin
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections