General
-
Target
804ad0057ecbe443729639fa060374a3
-
Size
2.9MB
-
MD5
804ad0057ecbe443729639fa060374a3
-
SHA1
6cd114c78f4d9a426291d361f7bf938fd0a3ed34
-
SHA256
96e142301b5dd334a6bca9ebad13848bdcd69e137f22dccb74a901459f67392d
-
SHA512
12120521ee7622b17f899929ff66cab1da299461f2a3c66fa7a18bd59f40d380b0a3e0883c19e222aa4c1790a52b8fd92150e53e86cc9ba69dd01e7805bb67a5
-
SSDEEP
49152:PSP7/U86BUFNE7U2TdQngvXOpmN74NH5HUyNRcUsCVOzetdZJ:a7c868iU2TungvXO44HBUCczzM3
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
804ad0057ecbe443729639fa060374a3
Headers
Sections