General

  • Target

    98bd57cea17e1f67a157a673eafb4f08

  • Size

    3.1MB

  • MD5

    98bd57cea17e1f67a157a673eafb4f08

  • SHA1

    fe6f33b15f1c17f9b3c04c5506c0424952873e1b

  • SHA256

    8ae61649cac434d90dad5be62bc1353360dac064448cfa020c21474188cc647c

  • SHA512

    d73a49bdab88df8015af05501a2a0902f7c11661056fab5cbe5f69899efc070010f60fbfdf62a15729de73837589dc6f40a0eb34afc4dd4b49bff190491b0d7a

  • SSDEEP

    49152:8KRZrTfIr+NRkS0NyFHiJLhfx2fDRPBsfilLscB8NvWbIopk7apVAWJxJVbxiwl:zfTQr+NIsHGhf0LRPCOLscBVpkjWj9

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 98bd57cea17e1f67a157a673eafb4f08
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections