General
-
Target
2d130747a7e5b4afe8f4775fce20ad76
-
Size
2.9MB
-
MD5
2d130747a7e5b4afe8f4775fce20ad76
-
SHA1
ff2c73be9278f16a268e500d66811de9282f63b8
-
SHA256
b24a8262ddfbe90b795e3525bed6987cf8609c5ebd2f53884bdf2ae2b09e8be8
-
SHA512
f8a1f243779f4513301525751d1013c67e399b640675fb4ab9f6784db91a226004648fd208f62b5113a43edf9c9f2955d9dce4d634ee55684204c0d0b6ff7d52
-
SSDEEP
49152:fRHeTQKP6bSKBNbk1jErYc2WzryMhpxQqbrsI8O6P4M338dB2IBlGuuDVUsdxxjl:ftmP65BNCjEkc/z2tVPO6gg3gnl/IVU8
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2d130747a7e5b4afe8f4775fce20ad76
Headers
Sections