Behavioral task
behavioral1
Sample
086820700ce331c78fe4048474d53b31.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
086820700ce331c78fe4048474d53b31.exe
Resource
win10v2004-20231222-en
General
-
Target
086820700ce331c78fe4048474d53b31
-
Size
5.8MB
-
MD5
086820700ce331c78fe4048474d53b31
-
SHA1
c6ddd6ccc1f314b06ee203f64cc1781c94edcb95
-
SHA256
94a12af5e0c8eecab5ff8a5e7b05b5b30f848752bb4c8e7b23839ea163e3c1e7
-
SHA512
1d64899e6c8fc7b0643c0327132d73377a86a2f6160677d92358b86e95ed95ce8b0ab60fc96473c30d5319440858c80f17d12ff59813f5c623fab3f0f6bfae10
-
SSDEEP
98304:ftmP65BNCjEkc/z2tVPOCgg3gnl/IVUs1jePsfgRyLJPcc8wU7gg3gnl/IVUs1jl:f3NaA7cPOGgl/iBiPgFLlogl/iBiP
Malware Config
Extracted
gozi
Signatures
Files
-
086820700ce331c78fe4048474d53b31.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE