General

  • Target

    d79d463b6a66d91834baf53baeccc321abc1b897ccb53616b2a4d08957c596f8

  • Size

    3.4MB

  • MD5

    35b6b42798234ef6a96310fa04179813

  • SHA1

    3189c0db743ef58d36ec0f809c527d348c8e6c82

  • SHA256

    d79d463b6a66d91834baf53baeccc321abc1b897ccb53616b2a4d08957c596f8

  • SHA512

    f4bbf30160810e275be1c4cc341e89127c9ff5f54cd886362d82ec3703fd2ebed9500a98ea5780b52fcf2e5f70c187a389dc1b886a356e0d495445d44688f6a2

  • SSDEEP

    49152:0EjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWJ:0EjlmQbfgSgwvSnN4iVJuS0xJdzYUqA

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d79d463b6a66d91834baf53baeccc321abc1b897ccb53616b2a4d08957c596f8
    .exe windows:5 windows x86 arch:x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections