General

  • Target

    NEAS.fa61e0ae14de41dd48458ec3b396e340_JC.exe

  • Size

    247KB

  • MD5

    fa61e0ae14de41dd48458ec3b396e340

  • SHA1

    ffa1cab6fb68f5a25b2a3633b16c8041320b4cc1

  • SHA256

    92b21a3ad0ab3e28a755cb173753976b49170ca850e5843a0b41d3b7d59c246c

  • SHA512

    ae3abe09c2425894c6c5afd3621e6815605279eb45032fe244b4b5c6d3b012782ec6164488071e67977fc2e05b377c06f451817832fb04afadc63b178020e07e

  • SSDEEP

    3072:jDTsdUa111d611/dGgdGb11/dGMHDNsdUa111dba1112oa11/dGiZ11/dGg:jcWa/n6/Vps/V/2Wa/nba/ta/Vp/V

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.fa61e0ae14de41dd48458ec3b396e340_JC.exe
    .exe windows:5 windows x86

    f88d3c770d02f1520497dca88cb94609


    Headers

    Imports

    Sections