General

  • Target

    c4ebf2096ce7a96f51afa2378e18bac9

  • Size

    1.5MB

  • MD5

    c4ebf2096ce7a96f51afa2378e18bac9

  • SHA1

    bc07ef20bf99fc8bb9e9d63adbb811f6b7e99fc7

  • SHA256

    16b789f5cca97bc53a1b249e2b045df0329a3bc7665e1b1538b32e4fdbef7407

  • SHA512

    79c43db31e67693b1bbaf62e5184ec0df39677e9e6d88b4033e2abe1aa5bd7da68af46d7595ef09141760d9016cc3230698c276b8abb66d6c1523bf345078853

  • SSDEEP

    49152:76zgm2hHuaAVT0ZifpzOLM3qezRpT/Yrg/:WhLa0Te8pzOIaapT/Yrg/

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c4ebf2096ce7a96f51afa2378e18bac9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections