General
-
Target
29936adf0042fd5e54d9760f9bb09e74
-
Size
5.8MB
-
MD5
29936adf0042fd5e54d9760f9bb09e74
-
SHA1
08d7901d45cd2808fce27295ed000090bb102f67
-
SHA256
f6aeb11693d97fa84b2c8a80d8d8f8b472fc0ac26e9eda5854eddf43549b4bfb
-
SHA512
4fc1230d683df882625ebc684968c232f2ece65b079e9c110e1e0d6d8fe40f371714b44815883951f4bcfae1a05f3e1fa87b3ea42ab1c6b8d904b4bbd4ac492b
-
SSDEEP
98304:dTvQI2CSvyzRUMLW/L4HBUCczzM3pV0g+IBoKuOP4HBUCczzM3:CIHHdoEWCtVgoLFAWC
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
29936adf0042fd5e54d9760f9bb09e74
Headers
Sections