General

  • Target

    a48eb7dd17027f57bdf494d6cda15aafbc38d7102d16a35b1bfd6fb7897bb9f8

  • Size

    3.5MB

  • MD5

    0bcb638863c1e91aef14065267d86dbf

  • SHA1

    52e18addb9d2d90850e0d30de0e4398ff8a52572

  • SHA256

    a48eb7dd17027f57bdf494d6cda15aafbc38d7102d16a35b1bfd6fb7897bb9f8

  • SHA512

    eca0b8c4cdf74d6af6913a5a0880d59fa2d3e0a0fab3ec647d054b9980605395fc0c3bbef0cfa90d112db01840b905a874fa7c44d768e79548e977531f9953c5

  • SSDEEP

    49152:GEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gW7:GEjlmQbfgSgwvSnN4iVJub0xtrNIJqM

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a48eb7dd17027f57bdf494d6cda15aafbc38d7102d16a35b1bfd6fb7897bb9f8
    .exe windows:5 windows x86 arch:x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections