General

  • Target

    712bfb389f0a054d89bfe87aba890c54

  • Size

    2.7MB

  • MD5

    712bfb389f0a054d89bfe87aba890c54

  • SHA1

    24f247db6c067a88c4078d921489b916b92ba5ab

  • SHA256

    37359d5c82afb126fb073dca2a3d24766063b78313fe6ad528b1c6c8dd36719a

  • SHA512

    8b44e56c3678f0cc4109185b261aa43556f0d098ea7c0cc1baddee251fa6de98ffada3f1fd77b870d4e2cee16ce6dba6e8b2d7279205579c4a7de4a0aaa987c6

  • SSDEEP

    49152:9BdAikPXem00oDn2q9dI4iUjmAcjR9b3Wtdaf/wEwJDMya/QP8llF7g4R9j:3WZPXem0/qqZdjRcjHAaffwJDMya/QPG

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 712bfb389f0a054d89bfe87aba890c54
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections