General

  • Target

    0b63fa4f141229a6450a7ad8b5709d8d_JaffaCakes118

  • Size

    63KB

  • MD5

    0b63fa4f141229a6450a7ad8b5709d8d

  • SHA1

    6e042486716a1e5029e7c84733e070d008e34bb6

  • SHA256

    51aec932db01fc08aec8d681c44129d3850bb8a60dfe4632a28eda582123325c

  • SHA512

    534c59de24e8ffbf4e92452d99036f34c51c385dba7b2af2ff9024db7cbaeed7ef16f27d2b9e35f504ffbea13cde60ea0495a5815ec75496496c3fc3bddbedd6

  • SSDEEP

    768:adFkM89gcWFuMXC8kA4myqxjYAEM3en4ZxbvYG2ZgXhkowBld2GeDC+PrBdH2+g8:gkMFcOuMk1yiunZQYkVe1FdH2JNy

Score
10/10

Malware Config

Extracted

Family

guloader

C2

https://drive.google.com/uc?export=download&id=1fnZYdfwUJYzHFLrXgG7wIq6WxcijjIHV

xor.base64

Signatures

  • Guloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b63fa4f141229a6450a7ad8b5709d8d_JaffaCakes118
    .zip
  • SOA.exe
    .exe windows:4 windows x86 arch:x86

    0f7cc043c597a232f7a22c4ce6f7b60a


    Headers

    Imports

    Sections