General

  • Target

    4146a29d37105567f6f6017043d2e1f6

  • Size

    2.7MB

  • MD5

    4146a29d37105567f6f6017043d2e1f6

  • SHA1

    8af7ea6671c0fb2f29850037861ad34e0190eb3c

  • SHA256

    4f9f7b540a31ffba3ca7e28f52d442c04ab0bfc1f9bf7081b8d0fc1906eac018

  • SHA512

    cc2cd5c50477b8159f16090f29b9cbaa9c8fc1617f5b27c1149b9333d035e94419b423c2cd3123324222e8abff070fb2c44cbca55eec31d5c86492929d261de8

  • SSDEEP

    49152:E3t6TNaamb2MOtyEEvbh1Ipqo/N74KY86Y0+WtofT90Xw5xnLif:E3cgamK4bh1WN17PXNzWCh0A5xnOf

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4146a29d37105567f6f6017043d2e1f6
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections