Overview

overview

10

Static

static

3

Original c...cs.exe

windows7-x64

10

Original c...cs.exe

windows10-2004-x64

10

pic05678063.exe

windows7-x64

10

pic05678063.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

Errors

Reason
config extraction: GuloaderBin: guloader: invalid shellcode
Reason
config extraction: GuloaderBin: guloader: invalid shellcode

General

  • Target

    e8384166957076efd104eaf0443b1cda502c5d6e3bdc3f0ea4764b5adb77ee16

  • Size

    60KB

  • MD5

    365b2c4ceb407b718259bcdb645071f3

  • SHA1

    b419e462e61007469718280974b59a487462b033

  • SHA256

    e8384166957076efd104eaf0443b1cda502c5d6e3bdc3f0ea4764b5adb77ee16

  • SHA512

    1d0cce1c8282892c91d80940e25ce48eef26fac07b551c1b1d58c9273b6ae8c9163fccf4a536c3a2a32aa8201fa1ccdcb9061c49d68379e561d282dd00984a08

  • SSDEEP

    1536:UQMAjlNUdTNvNP+bcynwzzfI4jhVxneawfydc8cz9:rlopvNmb5eI4fIawfqc8C

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e8384166957076efd104eaf0443b1cda502c5d6e3bdc3f0ea4764b5adb77ee16
    .zip

    Password: infected

  • Original copies of shipment docs.exe
    .exe windows:4 windows x86 arch:x86

    5472a08e66173dbf618e23de53964a7d


    Headers

    Imports

    Sections

  • pic05678063.exe
    .exe windows:4 windows x86 arch:x86

    5472a08e66173dbf618e23de53964a7d


    Headers

    Imports

    Sections