General

  • Target

    748f8cbb11c9bebf49eed47aae04cddd

  • Size

    2.7MB

  • MD5

    748f8cbb11c9bebf49eed47aae04cddd

  • SHA1

    7b1f0982a8b9e0f880bce394f930bec214b8247d

  • SHA256

    92cd63fda2b2d7195aead162e20e09af838de73307be617b0576415de02a4041

  • SHA512

    16897e7807f6d77201efb68da4bd08d50c97fc765e048f5bd4d80b525af63fd08fedcf92303ce681e53f25f66a89ddda881b8edc9474bcd928b7d4bcfb12206c

  • SSDEEP

    49152:FAPocCJJRYoXzxv2pczkonUYvrCx0YWA86aEat6zpWWGd3c:6PpCJJRYUzxv2pcz/1rCxdS6at6zgjds

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 748f8cbb11c9bebf49eed47aae04cddd
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections