General

  • Target

    c68a708c7f8176f80f0fb47973085ae7

  • Size

    11.7MB

  • MD5

    c68a708c7f8176f80f0fb47973085ae7

  • SHA1

    4b014bde0e588a71c8f473f53bc7d8c8e06ec680

  • SHA256

    4b1cdef0bb8dbbf34e319120cb8332845c4da6f0eb1e807cbfd05274ec3714b9

  • SHA512

    a79995dddeb65b65b7e16d4cb9e835110fe198753847fc6c027be9b5138d2a21127aa1c6af9e4ee71ae5104680f5aa034d65360de25b1807d148cdb13fec6be2

  • SSDEEP

    196608:feuf2JxFGgl/iBiPd6TB7RgDvd8lB+gl/iBiPzKXXUgl/iBiPd6TB7RgDvd8lB+0:feu+xE2ifTBdU1k+2iFXE2ifTBdU1k+L

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c68a708c7f8176f80f0fb47973085ae7
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections