Overview

overview

10

Static

static

10

f0c99abd91...18.exe

windows7-x64

10

f0c99abd91...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f0c99abd91b5b916052831c0a596767f_JaffaCakes118

  • Size

    64KB

  • MD5

    f0c99abd91b5b916052831c0a596767f

  • SHA1

    b391799ac30b2acc63d0808811714ecc4f38314c

  • SHA256

    d3707e1bb4bf15c0c8da1845554f375ed7917e01f8d61729000a90bc2ac1b060

  • SHA512

    5f229a655c64dd9373009e8b6a51d19f0ca01859561358367aef6caa2f187d9477cf77159d737d82ecf3e4fe9e09b71b0424cf0bea5d5f27a4cc08041d0139c3

  • SSDEEP

    768:nn/MaY6Ju57+0Dq/9y9tUyyT/eint9a2V4yheMznM:nnUaY667+x+tU7fnt9aGjhFA

Score
10/10
guloader

Malware Config

Extracted

Family

guloader

C2

https://drive.google.com/uc?export=download&id=1U60iATjk7w9J_ulnC6J5PxPuwCPfO8el

xor.base64

Signatures

  • Guloader family
    guloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f0c99abd91b5b916052831c0a596767f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2e3dfa87c302c1d9c7b0f1d14efec7bd


    Headers

    Imports

    Sections