General

  • Target

    b414d0d6f36f6273427822e5447031a9

  • Size

    11.7MB

  • MD5

    b414d0d6f36f6273427822e5447031a9

  • SHA1

    08e53967ae3f09c678d52f2b8473eb59f62d5a9b

  • SHA256

    b10fadeeac03b6a0fd2f85512485fc4538b203cd13101a1ea7645921897d1b20

  • SHA512

    8278c20851d5915c78c63a0f0d568dfe72b57ac7499e0b3d8460aac8ce3099cfc34b43f990154fe0793118d5b5645a4c75ac71b7b544adcffd5750108bc1d7eb

  • SSDEEP

    196608:V4yNIY519WCfQ02kP1bWCddHo8YU1XWCfQ02kP1bWC:egI6NJ1bh1XNJ1b

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b414d0d6f36f6273427822e5447031a9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections