General
-
Target
5adb7e0cea288709f96dd68bdb23f020
-
Size
5.3MB
-
MD5
5adb7e0cea288709f96dd68bdb23f020
-
SHA1
ea3a5afb14e4fc7001816b0e4390e49e36770867
-
SHA256
c177321b618cce51515ea8fac19ff72f3041e77a71f4183da2f78ac53f93e8c7
-
SHA512
3e726e447a97234e60015808dd5384aeec2c7d0a9bcfdfa50f953aa324b8d56b2209b6ab136eff4d0094a88f0af7ef03ad8d5c635471fbd29491edc304324fcc
-
SSDEEP
98304:cuqUM/hfMqWP1pFHEWIEAYptI4IHH2uiFy/+DpfwA5KHEWIEAYptI4IHHj:cuqP/hfeTqYptUPiY/OwA5KqYptUD
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5adb7e0cea288709f96dd68bdb23f020
Headers
Sections