General

  • Target

    436329353594cda052cf1a345f2d565b

  • Size

    1.5MB

  • MD5

    436329353594cda052cf1a345f2d565b

  • SHA1

    1aa681c344cacf56fd6c1b276cd1cfb5c0b279fb

  • SHA256

    1994ce92746e03d6be8bdd272b2058e9495fe64909ae33a03725434fca54c5f2

  • SHA512

    80de3acf3ccf25308318fb43bd85bbb7c638be7be8258fefa113d69f5ad0da153cf3fefbc1f16aff593daa671e0fc12865176cb55d2da21e08a9f0ecaada25d5

  • SSDEEP

    49152:vPgCH+8MVXVflCYT2abAN3hpv5XNsaP5s:ACHPMnlTALpJ2aC

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 436329353594cda052cf1a345f2d565b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections