General

  • Target

    bb2525d88b207a9f40b513b1bce2d3a1

  • Size

    2.9MB

  • MD5

    bb2525d88b207a9f40b513b1bce2d3a1

  • SHA1

    982bce9fac2c152a5939a85f0dc6651c9e1b0ac1

  • SHA256

    000b8eeb58de61285a9f6f6f176a61bc26119db913d242c491e7db53cc9cf5df

  • SHA512

    0f76a0f93059597dee76e39a4bd3f499c7dd39bed0c43f8bc9ea065c8dea65c71f7aefdaed32f7f38ad35d151271cdcbeaa30466cd0765c997357e0047d39e56

  • SSDEEP

    49152:mTckNkYGinPjBSjxgAVStecc4FrK514mNhnN74NH5HUyNRcUsCVOzetdZJ:ofTGibyNV2Y51r4HBUCczzM3

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb2525d88b207a9f40b513b1bce2d3a1
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections