General

  • Target

    5ab20bef64aba7c08a4df7e8ad98cc9a4e7c21de4ceacf75639704e45f44b2a2

  • Size

    3.4MB

  • MD5

    1f6e1039f0c02efde685626458593d6c

  • SHA1

    0dcbba798d1ec102661c8eca732d650c1e2351c4

  • SHA256

    5ab20bef64aba7c08a4df7e8ad98cc9a4e7c21de4ceacf75639704e45f44b2a2

  • SHA512

    f805a5f5b6213fef1b7e56f5c3e23ca4175332e74d56609ff3f16f33c4d42f965aad79e89f69ced38c94f11b9936bd46a1e1617c45b198bae93c253fa992c0ba

  • SSDEEP

    49152:jEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWi:jEjlmQbfgSgwvSnN4iVJuS0xJdzYUqD

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ab20bef64aba7c08a4df7e8ad98cc9a4e7c21de4ceacf75639704e45f44b2a2
    .exe windows:5 windows x86 arch:x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections