General

  • Target

    c0f9eb9e008677d19a7f868bce1b5d53

  • Size

    2.9MB

  • MD5

    c0f9eb9e008677d19a7f868bce1b5d53

  • SHA1

    c245da352909e4cfbdc8c12a5547f2b4a919f8cd

  • SHA256

    cbc23945a1344796c333363798b1deae46f6e39e3d2db3bea82be89fa89b68db

  • SHA512

    ca78902f986c1b19a6296673db3e9d94f3a54fafe5dfb4d76066da3c586aa940b35b752387a4ccf0bd9e7fe968c1291337366ab14f153f4bf53305e14304bbf1

  • SSDEEP

    49152:ZGQx911MdeZfx6B4lz6bNl+P4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:QQp1SeGB45al+gg3gnl/IVUs1jePs

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0f9eb9e008677d19a7f868bce1b5d53
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections