General

  • Target

    95fa40692355a80fbf4f77f74814bdf2

  • Size

    2.3MB

  • MD5

    95fa40692355a80fbf4f77f74814bdf2

  • SHA1

    ae79b824c8e0ff9b2b3e2134426f2849985588af

  • SHA256

    9b3e8eed5413b6fb6fae68ec76e6cd6c8136bb9cc9e181bcc075116eb1fc4d2b

  • SHA512

    520db83b7cc323bb96b8e3741e3d96cfbf709483708cb06769faee30b526d475f6006d4da3b0c8b6057d51cc0af057f2d76f5a7e1f15f434775b9598e11db4dc

  • SSDEEP

    49152:XZTvyf+czFVSHwxJgYAGopefrDXs6bQ0AsZKTSyRjIFNSnDM:Xxq+gew797TT3ccZ9yR6sM

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 95fa40692355a80fbf4f77f74814bdf2
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections