Behavioral task
behavioral1
Sample
gugu.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
gugu.exe
Resource
win10v2004-20230703-en
General
-
Target
gugu.bin
-
Size
258KB
-
MD5
7a3c14666885f17478610ecf16a9c837
-
SHA1
f857be146966ba6118b48561bf7b34fb2f3efca8
-
SHA256
9b46c6e27f6ea98a26927f7528c666592fd4085a5f31c5ebd1f2c83fb9cb5016
-
SHA512
3a7e2a9ae37d41640031559350c777616a1e022b38e9fb6f50e65cd91618a3c89b159ca804dc89550fa0bb70c30741dc050e5f4d878fb4c73adc9d05a3ecb040
-
SSDEEP
6144:/4SkHQ8gHm5X0pVQoVssdw815FN9aCXZ3xu3IGa44wj:/4SlmSpVfVs4jDRaE34Y2
Malware Config
Signatures
-
Guloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource gugu.bin
Files
-
gugu.bin.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 258KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE