General

  • Target

    7fd54e7a5d40cba9085b0b0f9a76f205

  • Size

    2.9MB

  • MD5

    7fd54e7a5d40cba9085b0b0f9a76f205

  • SHA1

    98a70641d2084b76680e386a8db204a684ec0970

  • SHA256

    64e67a3ea09b30c608d3cef122504897d043175f1d3e3fd3f90ed65599d985db

  • SHA512

    51aa9852646c0feb76312e4b0b22c9bc85b5bdececc1a3a8e63bb5fb33b8295cf48f2c4b5e4216db6775797b2050d7c383dac0b34d9980fd82e6633a3d46eabc

  • SSDEEP

    49152:8oX/6e1dKYDTV1So3iv9uoSP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:7X/LYYZ8oOigg3gnl/IVUs1jePs

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7fd54e7a5d40cba9085b0b0f9a76f205
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections