General
-
Target
977403e8a424d1a029369b715867c3056a4d0d8a1c75dcf9d84d9c56f9bcf802
-
Size
33.3MB
-
MD5
158c2e6b90ab30f6fdf653255a2beba0
-
SHA1
3288d9c8fb3642d2d60f534dd05a7b24417dfffd
-
SHA256
977403e8a424d1a029369b715867c3056a4d0d8a1c75dcf9d84d9c56f9bcf802
-
SHA512
6003425b0c92b3ebd7608070b1509e6de2148762dec291c44a6fda954bf1b4849542a6115987333267c67ee65b88416d1e6ad80a0bd8969020fa459916258a8d
-
SSDEEP
786432:8hl/8uLBgD7MkrYvUL8QHYx/2FHiPtP4erWXCYlOFOrAaP:878kOD7HnLVYxOFHiPZ4eD+
Score
10/10
Malware Config
Signatures
-
Gofing family
-
Gofing is a ransomware written in Golang using Velocity Polymorphic Compression (VPC) obfuscation. 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
977403e8a424d1a029369b715867c3056a4d0d8a1c75dcf9d84d9c56f9bcf802
c7269d59926fa4252270f407e4dab043
Headers
Imports
Sections