General

  • Target

    96171198667f338c9b6a448410f3dbcc

  • Size

    2.7MB

  • MD5

    96171198667f338c9b6a448410f3dbcc

  • SHA1

    8bfaf4a65b00e8ac6fa7121bfe4139f05521730e

  • SHA256

    b575502c207ba5c7cfa96f4f8d7fe5d3a6b9d3423a07599dad003abd5fc91623

  • SHA512

    f0bcf1c173a5184a0d210fa0dda2dec2dd80411f67d3a6f49423955c3c0ac0ba15186e9bf541bd9780309dda3d8bf782c4976bf8b8a36cae9825e1e67b03ee15

  • SSDEEP

    49152:LAfHgynsyM9SuA2KSp7+zzdWhh45dHQtHw+6VYehsip6mOh2XdiMibA/eipq/9BH:LAfhnsQ2gdWhgd6H158sipz/vx69i4uY

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 96171198667f338c9b6a448410f3dbcc
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections