General
-
Target
aa9d6dbdb57e612cc090f66de6e4e74d
-
Size
2.7MB
-
MD5
aa9d6dbdb57e612cc090f66de6e4e74d
-
SHA1
27d9f13eb49027a610126f1d5c6165ee8f04b938
-
SHA256
3afa1c7ca2c71abb781aafb1e31f8155a2a751872a530e7e48c05e0a8d7e1d90
-
SHA512
aa2a1fe7a0fb7a64da4aae5bf762471150b9572084c95c99ba3a27b2703b4875b7c479e9b25cfe11c7134af7e63200921ea11c71b5a0195c9df6fb582e079c1c
-
SSDEEP
49152:n7z4h58znORWEw0f6IZdwcsR9060XHzxEpg2YYynok2EbgDm6hXismDNY9YR9j:/478zODw0bhsH01XT2kYyoRE8C61iJDl
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
aa9d6dbdb57e612cc090f66de6e4e74d
Headers
Sections