General
-
Target
43182d3285db38e34cbcf3f725fcbd96
-
Size
5.8MB
-
MD5
43182d3285db38e34cbcf3f725fcbd96
-
SHA1
eabb8a9a4b3d6404fd6534db6f7f0f702ff185ac
-
SHA256
2992e1c4a470cc7af659a30a98ed1f6f103349cdb95b5714d95c9300b9b6083e
-
SHA512
4f9a07e1f669ab5881cb3177d32cd0696039c856cb8c6812a451c5692b830d53d53ee3cfb82d22dcc8ffcdf82a54920a1326669dba142edabbe6c7418db5a42a
-
SSDEEP
98304:ftmP65BNCjEkc/z2tVPO7Nc3byxa6oEPrWhgAcBdyybXEnHcolBM6bZxNc3byxak:f3NaA7cPOpc3byQCPrWhlcBLXEHckM63
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
43182d3285db38e34cbcf3f725fcbd96
Headers
Sections