General

  • Target

    0f522921dcd052e06400aea565983a91

  • Size

    2.7MB

  • MD5

    0f522921dcd052e06400aea565983a91

  • SHA1

    e05dab2d6fd6dac1b52cdb05cafc2eb0c2a1f074

  • SHA256

    5fcc7088e70b089fc25b1e605bde8554f219841a13892515f2635a7dc2b6808d

  • SHA512

    d35dd1fd98fdc3d805c8c196a7cabd10bdf93f02642f550eb629393f2ed6588cb027d8f4c1d35251b8e16fe9893b9ea91feef601959cc112ba9761abaaa63d32

  • SSDEEP

    49152:OQHRlfjumSduu8Ck34giflXtISHvv648r9fsHAJImSLMW:jxEmSduucIVlXGSPv64i956mSLMW

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f522921dcd052e06400aea565983a91
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections