General

  • Target

    94e354de63968cd4fb0cdad6df4c2430

  • Size

    1.5MB

  • MD5

    94e354de63968cd4fb0cdad6df4c2430

  • SHA1

    9257e7995ac7675941f6e30b12ded09a6548f298

  • SHA256

    9debefaacb5a73f9361f63ce9353e2da1461726c11cd867fc0f4ba368139ff0a

  • SHA512

    f2eb6fb06fadafb722b6c5dfc7c32957ca6846d41641d3e81e843be465c7fe93a7d1d45bc57f35522b2fd98085a298a3e504918367a95cd2ac228c941f67590c

  • SSDEEP

    24576:vPgCfSM9UtMVVSbKIVltDxf4ociF12eqRry949Zkm7QStFsiwV:vPgCH+8MVXVflCA949Zk9StK

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94e354de63968cd4fb0cdad6df4c2430
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections