General

  • Target

    884824bee7a47d4da3feacd08fd265e4

  • Size

    2.5MB

  • MD5

    884824bee7a47d4da3feacd08fd265e4

  • SHA1

    885f594d5a3ba1b005b90773a18e1b03f61b20ab

  • SHA256

    f8d752e73dbcb95fbdfaf6d47a38e5bc3a4681f534c2190ef4f939cd11db5400

  • SHA512

    55a91fbfbe6daea48588905341ab746493162771d38753f07775af94652ec9111fb14b905cb90738726ce02326d387ca945372c44b26c363c663d06ccbefd228

  • SSDEEP

    49152:LAfHgynsyM9SuA2KSp7+zzdWhh45dHQtHweN74NH5HUyNRcUsCVOzet0:LAfhnsQ2gdWhgd6Hx4HBUCczz9

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 884824bee7a47d4da3feacd08fd265e4
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections