General

  • Target

    2646e56097a7ab1cbf5a8aee91b628da

  • Size

    2.9MB

  • MD5

    2646e56097a7ab1cbf5a8aee91b628da

  • SHA1

    6c42436b6058e8ca22557304f67e753372862bb2

  • SHA256

    1121cf3768305386a19f5563551be3f54e8570b0e543b58f344fa25adcee300e

  • SHA512

    41561d078934056c5a2e55bc0916bfe5a6ceed395e26403a0e770f8f11c8f321a167299fa812e376b7736280528a85b1fef91325739af3305aa473fc7c33ed5c

  • SSDEEP

    49152:AuxKglzEhZGLVDv4JYiawtSf5MN74NH5HUyNRcUsCVOzetdZJ:AuMglzEhZajM4HBUCczzM3

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2646e56097a7ab1cbf5a8aee91b628da
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections