Behavioral task
behavioral1
Sample
05bf5ff7639a53e7c124274ee73b1fc2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05bf5ff7639a53e7c124274ee73b1fc2.exe
Resource
win10v2004-20231215-en
General
-
Target
05bf5ff7639a53e7c124274ee73b1fc2
-
Size
5.8MB
-
MD5
05bf5ff7639a53e7c124274ee73b1fc2
-
SHA1
67263527143f85bc7aa81da7441cf96185be11a8
-
SHA256
7d345a90a541e14680d48bbb8ffa583a08e32cce73e0b8ff6fd31dd0866b0fa7
-
SHA512
fcb405caa48190f1eecf7239facac458fe5d2019c369df140cfbdbadfe047747189e5056e110484ca949127c49de8e9f67e67bb4aafc232c25241718a6e3d8c0
-
SSDEEP
98304:phP+Puf2JxFHVi3q35l7m5E2DK4yyiI04u4Jbi3q35l7m5E:feuf2JxFEu5l72Kwij4Puu5l7
Malware Config
Extracted
gozi
Signatures
Files
-
05bf5ff7639a53e7c124274ee73b1fc2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE