General

  • Target

    4648fdeb3e1c186cb41179290cec0770bcd53c772fed9e96a3dfb6af11e05344

  • Size

    2.0MB

  • MD5

    213ac23ba4cdc890f491a77a8de1b87a

  • SHA1

    4e70867cda11124fcab929fbbbff90912f98f062

  • SHA256

    4648fdeb3e1c186cb41179290cec0770bcd53c772fed9e96a3dfb6af11e05344

  • SHA512

    1701e15b9b33c5561aa841a761818b32105eabc42d20e30c3affe180bf9a9578caefde3a73e6182e63fc16a22fd4d2c9fd59d199bc0b31012e011e51548b2759

  • SSDEEP

    49152:LjIZbc28jdzlP6Z1UM6c2ljQzCl3rgkoPfR3V5SVZElU2TPZR9e:L0Z42aVlS3UQ2ljQzCukoPfR3V5S

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4648fdeb3e1c186cb41179290cec0770bcd53c772fed9e96a3dfb6af11e05344
    .exe windows x86

    d50debeb165ff1a4bd91bd21bff00bc9


    Headers

    Imports

    Exports

    Sections