General

  • Target

    26622874259ef76f8efe1b6fadcbc237

  • Size

    5.3MB

  • MD5

    26622874259ef76f8efe1b6fadcbc237

  • SHA1

    aa754625e31d3eb530ab7899640b28191bb295f9

  • SHA256

    f230080b8cec4c0b4ea0ad7fa7a76982da186808a2c832c9d5d4804b189f3e3f

  • SHA512

    d434a48e57cc8eb1e7eb745d5a91c0bd4f9e999f66afe199d5e1a7771889be88e715c84857f49572a636c54b1678dbcc8aa53c8305064d039647ec47d10a05fb

  • SSDEEP

    98304:snFcCXi7RGgt5H6P2dVIqNaS/DCHGnATOwlQH8xH6P2dVIqNaS/DCHj:ITy7rXFWmATdCH8xXFWD

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 26622874259ef76f8efe1b6fadcbc237
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections