General

  • Target

    ddaa5f9293f1f8c0f43fbe14bd5d4b72046b0e1b8634c4173e974892445e31bb

  • Size

    3.4MB

  • MD5

    b17ffeab6b0d8b1bf245713356ca46cd

  • SHA1

    ac1e71ef46742ca61f9d0879f0b6a93b4560443f

  • SHA256

    ddaa5f9293f1f8c0f43fbe14bd5d4b72046b0e1b8634c4173e974892445e31bb

  • SHA512

    015d2445f857513678cc3f096187846e3d5fcc1832af2c752855c72625c28ba89735a5f53858676f69c68115c9416ac99eabeacb98fa78b566e15bc835231b23

  • SSDEEP

    49152:7EjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWD:7EjlmQbfgSgwvSnN4iVJuS0xJdzYUqe

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ddaa5f9293f1f8c0f43fbe14bd5d4b72046b0e1b8634c4173e974892445e31bb
    .exe windows:5 windows x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections