General

  • Target

    cc2c2deb97f3dcc7c5e824b34b41d897

  • Size

    2.9MB

  • MD5

    cc2c2deb97f3dcc7c5e824b34b41d897

  • SHA1

    4673b8a80fa3f657039b868733910a0fea5b194f

  • SHA256

    ada3ef8fbb0861215d2deb4a39cd886495c824e229043cc8d9118a865d41717c

  • SHA512

    6f9b7cbc0808642b81db41f3e8ffd8815afd466d0538245619760996bf96f61fdcdc18d5acac0d2ed43a6398de47dbffea88400a705e367db39c20006cc89bb7

  • SSDEEP

    49152:vQ/wFmaeCj/E24Zcyks4emAZXImb7EZmP4M338dB2IBlGuuDVUsdxxjeQZwxPYRr:vriCj/ckj3U64gg3gnl/IVUs1jePs

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc2c2deb97f3dcc7c5e824b34b41d897
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections