Overview

overview

10

Static

static

10

0dc3f44425...18.exe

windows7-x64

10

0dc3f44425...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0dc3f44425c7a381db6a34c368c1d5d2_JaffaCakes118

  • Size

    80KB

  • MD5

    0dc3f44425c7a381db6a34c368c1d5d2

  • SHA1

    310aa32d2baf22cd89287affba3a4f0455baa8c4

  • SHA256

    428d9344732516e73243f5a2da5506b134e841d762b1f7b897f584d72d523078

  • SHA512

    e5a51a2e973a7019524058a7b24bbe354096f5ec8135b1a3c83aefa50f4cb1716926cabe95c588b21c0a878de9a2c12f96b6f028d754f102459b39acda8e59fa

  • SSDEEP

    1536:NNOv9NWFNVeCnisK/1xfTVlp8x/YXDvi5MyUbL5YmxQEhq:revWwkisK/1xfT/p8JYXDvi5If5YWQEQ

Score
10/10
guloader

Malware Config

Extracted

Family

guloader

C2

https://drive.google.com/uc?export=download&id=1eCNeUqBN1AagFTofixYSovTbymQ4Rkgf

xor.base64

Signatures

  • Guloader family
    guloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dc3f44425c7a381db6a34c368c1d5d2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    96888280bc077340192cf12741a75308


    Headers

    Imports

    Sections