General
-
Target
b13cf5862bbbf1e91fca2da85bacaef4
-
Size
5.8MB
-
MD5
b13cf5862bbbf1e91fca2da85bacaef4
-
SHA1
71d0ad0d84131fd26117ce9f3a264c7602642b00
-
SHA256
21442eeb04aec36653fc8f42004e08ebd70dddce9147262127b8d93cd3cfc02c
-
SHA512
be32b66d13709a71dc24cbb264dc4d3e4ce0b88a7a950cbd71cfd057cb0c8c9f9de21c34d11b63d6ab0b14413c4f3b96b6098c9e47b77db053852935c91a1ba4
-
SSDEEP
98304:uLvNr9ueIHau42c1joCjMPkNwk6+Q27TSEgvHau42c1joCjMPkNwk6:uV9ueKauq1jI86GQASEgfauq1jI86
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b13cf5862bbbf1e91fca2da85bacaef4
Headers
Sections