General

  • Target

    086820700ce331c78fe4048474d53b31

  • Size

    5.8MB

  • MD5

    086820700ce331c78fe4048474d53b31

  • SHA1

    c6ddd6ccc1f314b06ee203f64cc1781c94edcb95

  • SHA256

    94a12af5e0c8eecab5ff8a5e7b05b5b30f848752bb4c8e7b23839ea163e3c1e7

  • SHA512

    1d64899e6c8fc7b0643c0327132d73377a86a2f6160677d92358b86e95ed95ce8b0ab60fc96473c30d5319440858c80f17d12ff59813f5c623fab3f0f6bfae10

  • SSDEEP

    98304:ftmP65BNCjEkc/z2tVPOCgg3gnl/IVUs1jePsfgRyLJPcc8wU7gg3gnl/IVUs1jl:f3NaA7cPOGgl/iBiPgFLlogl/iBiP

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 086820700ce331c78fe4048474d53b31
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections