General

  • Target

    640d4837f5ea317db4b75ec6acfac8d6e451908b44edbc6eba140925078c45b2

  • Size

    3.5MB

  • MD5

    2ad820c75af759bfefac251bed2635c8

  • SHA1

    2fc338225ed464bbad0739ddd3a53689b5a07169

  • SHA256

    640d4837f5ea317db4b75ec6acfac8d6e451908b44edbc6eba140925078c45b2

  • SHA512

    1fd91f5e7b5eee746fba9546f7df2126772b00f8f3c4ed2c400a85c5bbf61f36c4940192ac3c0be69f679a900f7908efc8f9629ee4bbe0e14140b70dbb6fc91f

  • SSDEEP

    98304:nEjlmQbfgSgwvSnN4iVJur0xM/licQBqw:nEjgQPXq0/xQBqw

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 640d4837f5ea317db4b75ec6acfac8d6e451908b44edbc6eba140925078c45b2
    .exe windows:5 windows x86 arch:x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections