General

  • Target

    e027a8774bb0c8e7cd73f9696fcde874

  • Size

    8.7MB

  • MD5

    e027a8774bb0c8e7cd73f9696fcde874

  • SHA1

    9b8d7fe76d88db49b744667b45f872f84491d51c

  • SHA256

    9b65a2e5e6b800697141efba2900d1c4f089b6a968225596324317db5a99c19f

  • SHA512

    efd0818e375e4fad71d37b4c68a46a41a1e6267a92c3d41bd3457bb8014d5930b731c03dbbbed1bc20b4004ab714da6d6d7de2941f776a95ad5c2002be05871a

  • SSDEEP

    196608:NWQJOGWC/f1q3ULWC+IZva22WC/f1q3ULWCX:8QJvh1q3UL3f2h1q3UL9

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e027a8774bb0c8e7cd73f9696fcde874
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections