General

  • Target

    2732-1-0x0000000000BB0000-0x0000000000C0F000-memory.dmp

  • Size

    380KB

  • MD5

    362d73439b90f42137788d748b900f0c

  • SHA1

    9981277b3f9d81a32c0f585dba38d0ee896b6b22

  • SHA256

    bf29d0dc4d32c6d8b0b75c70919eb5867c8184a20267f4c33ca4c3f4a9ba3fa5

  • SHA512

    feeacd6756fe22011cf83164fc5394b3b7815403d5c0391d9921cf6db2fbc6bf053226de554fe30bb6a92d512369d2010061bafac8a6a428c68d1556e1780658

  • SSDEEP

    6144:dx5bKDczFa97cwcke/TaHUMhn0RM6BfKuTtmaJemIY/INg9o6:1uczacw2/ninLgfKuTkkrINg9o

Score
10/10

Malware Config

Extracted

Family

gozi

Attributes
  • build

    214084

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2732-1-0x0000000000BB0000-0x0000000000C0F000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections