General

  • Target

    NEAS.1341e1878a52d99e3d1fa6cc6001aec0.exe

  • Size

    3.4MB

  • MD5

    1341e1878a52d99e3d1fa6cc6001aec0

  • SHA1

    2c8ff05c6e1639df2fb0c83a1ca37b7bb34e9516

  • SHA256

    27349c632ee3cbd9e1cef20ef6a3ec12281b0c59935b2bab9dee6921bd101640

  • SHA512

    fae78b1671f1d988148ee63de10274790e7b7307111b33a5adfaafd20f20adfb7f3153d359d584d5dd5ad708c06689adec8d79a208d215c4c8909b9807140632

  • SSDEEP

    49152:uEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWA:uEjlmQbfgSgwvSnN4iVJuS0xJdzYUqR

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.1341e1878a52d99e3d1fa6cc6001aec0.exe
    .exe windows:5 windows x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections