General

  • Target

    a0f26df1a1836b35513177145f74bdab

  • Size

    1.5MB

  • MD5

    a0f26df1a1836b35513177145f74bdab

  • SHA1

    eef2c35b787c9f7fab1868558f35de70f8d0bf19

  • SHA256

    45e43596da73538e513ce4b6e674871bfc4f70e781f7c82d622d6db469db056c

  • SHA512

    e7d70192fabefe126316d0667629b8e90aef87f2a6a1407bc0d8b2b4d9838209d7adbecfb2009b3d9747ff61bceb4fb97c4549caf6a65836949128e7499d107f

  • SSDEEP

    49152:MYGSNHuW2wS7il968zrwD+Nfinctg57dgecGn:tNH1xlRrowfKqe7n

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0f26df1a1836b35513177145f74bdab
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections