General

  • Target

    67a3945af675ab31eb3d4f58db43ae02

  • Size

    5.8MB

  • MD5

    67a3945af675ab31eb3d4f58db43ae02

  • SHA1

    f1fbcdfc4b7dfd6a143526b3fe4f9544cdbcdaf6

  • SHA256

    55742750956d5c1c6d9f8f82f4f3133b86f8389ad0213f1e4def1cc28c149bd8

  • SHA512

    05c7a3fd73db18c10c8396fc0b63efca60e94f2235e4fc852f2781668eaf83500d4bb3c7df81041063fc09a75135f10187605ab74be6c2f60bbbb1e5dfd5ff7a

  • SSDEEP

    98304:ftmP65BNCjEkc/z2tVPOTHau42c1joCjMPkNwk6alDAqD7z3uboHau42c1joCjMP:f3NaA7cPOzauq1jI86FA7y2auq1jI86

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 67a3945af675ab31eb3d4f58db43ae02
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections