General

  • Target

    3f1aef25f72c53e0943b96612e9edb87

  • Size

    2.9MB

  • MD5

    3f1aef25f72c53e0943b96612e9edb87

  • SHA1

    c498c15f80e6f74dbdb2f7ad93eb8aefef94c4c0

  • SHA256

    2b90335028c7240356ac41a05f5eaefc808d093bf310f3ac0dd325ccf5304359

  • SHA512

    3e881b62546feb18680bc2b276a534fec01b6c44f532c3f11ba47403a2f1e0a9bdb954e21f4b22799d597a912ffc933eba58be181ecd11a4b2860bb1cb4532eb

  • SSDEEP

    49152:+IHfMrStE6rZ9Z4r0gMrUN74NH5HUyNRcUsCVOzetdZJ:+mfliKfg0gz4HBUCczzM3

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f1aef25f72c53e0943b96612e9edb87
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections