General
-
Target
16cbbbff6778e30d98280e10a6a6abab
-
Size
2.9MB
-
MD5
16cbbbff6778e30d98280e10a6a6abab
-
SHA1
1e3549d31a3f9733ff4a52d18e45356c402fdd6c
-
SHA256
dfe725130579fe79bde5130c9efe97793bb9ffcf6643c563c3e69e31d03d616c
-
SHA512
0137b4c2f82d7ef5bf70aa0b5690a90d197b287815f6ad10a6048693bc5810cc6061fb84b1383246d05bc36bfaab930772d3a74eebbd3d8735c1b0230d7c32eb
-
SSDEEP
49152:xjgnaK0u5SXpMITrchwgdMbP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:5gnU3cWgdMbgg3gnl/IVUs1jePs
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
16cbbbff6778e30d98280e10a6a6abab
Headers
Sections