General

  • Target

    c66734958d74cc6c84b2d37ab62e69229b92e45a47c16b9ac9f29cc1b5e3a8b9

  • Size

    3.5MB

  • MD5

    04a097bb8116d9da4d367b00fba6d844

  • SHA1

    cfd87d31221543d49ec281912b2169fca820c347

  • SHA256

    c66734958d74cc6c84b2d37ab62e69229b92e45a47c16b9ac9f29cc1b5e3a8b9

  • SHA512

    6fd7f904299dd31d388d9d916329b45811c05ae95773c7aa0a39959efedfc8a3643a2e2fa8f7ecbe87becf6682fd8c05825a94f535328dbc1f9a41086d5f3966

  • SSDEEP

    49152:GEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gW8:GEjlmQbfgSgwvSnN4iVJuT0xxMWsaqw

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c66734958d74cc6c84b2d37ab62e69229b92e45a47c16b9ac9f29cc1b5e3a8b9
    .exe windows:5 windows x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections