General

  • Target

    540c411eefbd14f607dcc335ee377b27.exe

  • Size

    5.3MB

  • MD5

    540c411eefbd14f607dcc335ee377b27

  • SHA1

    31662ad06e1c43ebf7beba7aa34a26e36a86b28e

  • SHA256

    46a5f13c362615e9022ac2514daaecb6bcf8bece3fd54fc39ba55f680ee4474c

  • SHA512

    8e63eba1430c26cf87a55fbddb95d1ed689216e3617f4666470cf15cc0db35b23d610e238d672bbe1377923c528a459f43ba5c3dbc66e1a217b68217739f11c9

  • SSDEEP

    98304:0w6oK3CxVSI3yaQ77uM0yRK4CJxVSI3y:0w6axryam7rXexry

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 540c411eefbd14f607dcc335ee377b27.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections