General

  • Target

    0x000900000001224f-1386.dat

  • Size

    37KB

  • MD5

    3969005fd29b3dfb0d2426acc4a56cd4

  • SHA1

    9436d62cfa38f397ad416498e81c3bad2a2796a7

  • SHA256

    39f62e75877e7454661178e8c171d392bf229e75ef3c3e4ff0456cca40851aec

  • SHA512

    d4f41e42241e2f2cbf69f87199f0559d64f65b639e9618907279d8f2cd67111c9d630e6af195de9e12561aee3dee38bb46dda3202c2b78b42574c8566c1dcc4c

  • SSDEEP

    768:dA3rPI5jShpW1v5wlZTyYBkNmrFmxg7LtPx5hRfJNIaAeXqD5VGgm8slSm5IL1rZ:e3rPI5jSu1aZTbZFpXnaHeaD5VBmUmuF

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000900000001224f-1386.dat
    .exe windows x86

    1640d668d1471f340cbe565fe63522f6


    Headers

    Imports

    Sections