General

  • Target

    811b7e674c2fee706a537805265b9ecbaa0f69e62f39f2f7b264207eac6f0ef7

  • Size

    3.5MB

  • MD5

    01f3a78277a4d1f2f459da867768f968

  • SHA1

    16d5a9b5579e848aafbea3793e34648c157e0d22

  • SHA256

    811b7e674c2fee706a537805265b9ecbaa0f69e62f39f2f7b264207eac6f0ef7

  • SHA512

    ad3e2505c52574d79541cbf978671f8b06b1fa2a9058403399fac564dd944bdd4652e852acb8bfc08127a50fb6053bd0c3c97867431e26b4a98b8ac6879474d2

  • SSDEEP

    49152:dEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWL:dEjlmQbfgSgwvSnN4iVJuA0xtrT8+q+

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 811b7e674c2fee706a537805265b9ecbaa0f69e62f39f2f7b264207eac6f0ef7
    .exe windows:5 windows x86 arch:x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections