General

  • Target

    4d08cc395f0a1de161dd30e4cb3579f606b3d5557b52068caddb8ee5882c6650

  • Size

    3.4MB

  • MD5

    1a1497e7333e3574b9babfc31e649860

  • SHA1

    a8f476d4a3c538939d872517f4ab237988a23120

  • SHA256

    4d08cc395f0a1de161dd30e4cb3579f606b3d5557b52068caddb8ee5882c6650

  • SHA512

    ea8535c7c2334348e2c8ba87b589636685e3724d332068d31be6ceb67c9c7be7674b0985edfeab1cdd93fdfcdfb5e791bc690b890d343d6d5d796a5a5a6cf8a4

  • SSDEEP

    49152:5EjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWb:5EjlmQbfgSgwvSnN4iVJuS0xJdzYUqu

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d08cc395f0a1de161dd30e4cb3579f606b3d5557b52068caddb8ee5882c6650
    .exe windows:5 windows x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections