General

  • Target

    2ceb52230b31109c06e8334f65866160

  • Size

    2.7MB

  • MD5

    2ceb52230b31109c06e8334f65866160

  • SHA1

    6cd1e8b23e5b42c4c33d9b81c0c42f049aef2edf

  • SHA256

    cc3e3b4ca163040c8f8004d3bfba5ea330fa432878315f4435fd50a13eff2113

  • SHA512

    9c553386fb1405345147512696a08b99017eb25a8baab56e4a0d355fc8f94025107669ea0d2dc307d99cff50d387d40935d4dbea5f7837fcd1c0f2fe3c5ece82

  • SSDEEP

    49152:ZGQx911MdeZfx6B4lz6bNlGulpft6MFgNi5wrsGaaUjtLq4WudMq43f:QQp1SeGB45alGMFsoG0x3WudMt3f

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ceb52230b31109c06e8334f65866160
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections