General
-
Target
c36c3af41b4eb20c005740c994139e9a
-
Size
2.7MB
-
MD5
c36c3af41b4eb20c005740c994139e9a
-
SHA1
5c731e8050550e61a12d9d9cae7656b4337e345b
-
SHA256
8ed19ec2bde9f56c36fadac02ff09f766dcd672a42890c85aa6454e18cfb4933
-
SHA512
1bffc30027777c7b3fcc3fbae3b169ae69372d0cd71720cc1a86a90d9587c938b4f428dd310797271878be82cc9eacaef0eb125f3966f9fc809d1c2b696a0498
-
SSDEEP
49152:Om79F2E6VaRIMlUVFswB5WA847R9vvLY1jllNeIHe8izfB+OCoIF45dXDtumR9j:beVazlu5WAj7HXODU/8izfB+OCoIF45L
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c36c3af41b4eb20c005740c994139e9a
Headers
Sections