Extracted

• • Target

    ea58a2d052aaee30b19a34048ce04066_JaffaCakes118

  • Size

    80KB

  • MD5

    ea58a2d052aaee30b19a34048ce04066

  • SHA1

    29cca773cb11097d127ba5ddb2d6ca69c462aa21

  • SHA256

    27d318fe5d1d8f02c39b6b82690e4be83eeb3f357618cbabd7d808a23924b277

  • SHA512

    da89be0fc56778b3a5a0d7efc66f51a38ef7de963e29c9e6fc6e73ce9af8972d818462720e5b017b214f6ddbc9d1d7e27213fa9273a425f2ec8365d4f5040e54

  • SSDEEP

    1536:EV69BrIP08K0mkNjU42WGFAxUdw7sXVi:j7IP7TDhH2WNWw7Z

  Score

  10^/10

  guloaderdiscoverydownloaderguloader

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

    downloaderguloader

  • Guloader payload

    guloader

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2