General

  • Target

    33f788f68b0f9a68363a65f89187583b

  • Size

    80KB

  • MD5

    33f788f68b0f9a68363a65f89187583b

  • SHA1

    137cb68bab8487a88e27e6ca9d1bf67286e99328

  • SHA256

    03517ca85c6e92422493326bfea8f2d60cf2f2f248c51a4f34bc386473fee849

  • SHA512

    e16023729f969db60f2fdad9f475cfe536025b72c6f9e01eae8ae9aa25e857acbecaf4901639a733728d20caa8b0374890864ca27b4fcf0677e6e14578913d2b

  • SSDEEP

    1536:ZHdLG9VHizixHK/Lo5lp/CgfYlG9FWQt2kEzoQkVF0CmuJd4BXL:ZHdLGnC+BU85j/Cgys4kETkVFBbd45

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 33f788f68b0f9a68363a65f89187583b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections