General

  • Target

    f3a978e36399db10b5f32a866df418c2ed1aa7b3238ae71cd4df5270fcd9d2db

  • Size

    3.5MB

  • MD5

    09d9daf5fffb1df94df21787efc6deb7

  • SHA1

    2f6056d6a29ffb2efd365d786c7838fad398c6e7

  • SHA256

    f3a978e36399db10b5f32a866df418c2ed1aa7b3238ae71cd4df5270fcd9d2db

  • SHA512

    f8502f3f9501f975cb7de3a9c23db067c41421f92a564d943b7e36f14d60e67ddd4a3764f952687b315d66e899e00da91ec356bdd649b1dacf8d01da946417d9

  • SSDEEP

    49152:NEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWH:NEjlmQbfgSgwvSnN4iVJus0xi9A+AmqV

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f3a978e36399db10b5f32a866df418c2ed1aa7b3238ae71cd4df5270fcd9d2db
    .exe windows:5 windows x86 arch:x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections