General

  • Target

    ad2d15a0810827a8b164d8b9dd951595

  • Size

    1.5MB

  • MD5

    ad2d15a0810827a8b164d8b9dd951595

  • SHA1

    e5444b81a613e3f6c7696af0fe63220bae3d507f

  • SHA256

    66ac80eba4d14a1857fdadfb0a98e8efac5452e5e82528ebc9b504018caa72b3

  • SHA512

    166f29bd2a8cd59fa6d1c086123aed9060a9c45a51a4d9b9223ef88a62a75184bdc120cca28ed2359091e4c0d1cccbdcaa67defbee17e4dde1d3525593db3807

  • SSDEEP

    24576:vPgCfSM9UtMVVSbKIVltDxf4ociF12FDj+KwAftGe7UqPhUCpZMKihJlAmS3o6QY:vPgCH+8MVXVflCRRtZJPmeZehJOmMod

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad2d15a0810827a8b164d8b9dd951595
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections