General

  • Target

    f8d338f1ed57177e513a6cbc156dd97ff7d70aad87a2c5424318ddf3c74e4ead

  • Size

    3.5MB

  • MD5

    281b87e391af5ab098cfd82723c96a31

  • SHA1

    460756603d5ff8141088f5fed4c0c7cd977155b9

  • SHA256

    f8d338f1ed57177e513a6cbc156dd97ff7d70aad87a2c5424318ddf3c74e4ead

  • SHA512

    1ecb4ce4fdb4b3a5b30cbe3427473fdc62709488b40395a6a7fee723570510a688fbf054a9b96b609b1178e4cf2ae50f8d34226e0989ebe2f25945b72243491e

  • SSDEEP

    49152:+EjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gW3:+EjlmQbfgSgwvSnN4iVJu10xLrTg3qg

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8d338f1ed57177e513a6cbc156dd97ff7d70aad87a2c5424318ddf3c74e4ead
    .exe windows:5 windows x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections