Behavioral task
behavioral1
Sample
d40cf0a918b38a9645a2a241f99431ea.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d40cf0a918b38a9645a2a241f99431ea.dll
Resource
win10v2004-20230703-en
General
-
Target
d40cf0a918b38a9645a2a241f99431ea.bin
-
Size
256KB
-
MD5
d40cf0a918b38a9645a2a241f99431ea
-
SHA1
e87b06bb99ebf6a02c12cab7a552c8b31fc75c7b
-
SHA256
ca4976f2a9490a1547135763eaf83259d2ca4017ca64a8ec00e6218b8889bdb5
-
SHA512
3c745c2ff9289cdbf900174ded7cf4613066ed70a06b8bf9b821e324953fea6f3be652173ed76c7f771d96beaefd2556bcc0f97662a2b0d83919e4a33773f37f
-
SSDEEP
6144:db7eFQN9aq3cqt4IyOHJ1wMk5EE/QlSONJVvY/bMsw4LdO8n:db7eFQHaqMqt4IyOHJ1wMk5EE/QlSONy
Malware Config
Extracted
gozi
Signatures
-
Gozi family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d40cf0a918b38a9645a2a241f99431ea.bin
Files
-
d40cf0a918b38a9645a2a241f99431ea.bin.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ