General

  • Target

    a15fbc5a71c02068d8a7687409f97aa1

  • Size

    10.7MB

  • MD5

    a15fbc5a71c02068d8a7687409f97aa1

  • SHA1

    dd62ed6b5e4d2f227963c8d4c11c9e0a88023468

  • SHA256

    e64ac03f5eba4b1feee086e13a23cf27e024174cb0b66442e206b179d073f8c2

  • SHA512

    86fd69267728b2a44c80c556a933ee98b144585194de9d9eed5c5627e8e05ca6621090b12db423327091d8470788c91b5b41429729822df69dbbb0fe626ecf23

  • SSDEEP

    196608:jxP2usICnXStTH7RZ8Cnt+F0gNCnXStTH7RZ8Cn:9PHsICYv8C0F0sCYv8C

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a15fbc5a71c02068d8a7687409f97aa1
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections