General

  • Target

    c17585d5e58da1c973a1ddade92f688b012c2a4c6055a57ffbc998a3bd5e3472

  • Size

    3.5MB

  • MD5

    edabc890a56c972014c4ddcfb02756c5

  • SHA1

    944ff46b240f851d96dc88c3b957f49d0cf4741e

  • SHA256

    c17585d5e58da1c973a1ddade92f688b012c2a4c6055a57ffbc998a3bd5e3472

  • SHA512

    dd99731011e1f4afccedb47abd55ce92c662cc27f69fe3d8bcb58f58bd66672c6b6de92daa23bc26d8c917a50c7e3821fb45cf68c38e8cffde948ed48071f615

  • SSDEEP

    49152:0EjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWu:0EjlmQbfgSgwvSnN4iVJuK0xIrQQfqw

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c17585d5e58da1c973a1ddade92f688b012c2a4c6055a57ffbc998a3bd5e3472
    .exe windows x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections