guloader | JaffaCakes118_92cfe6078d826c078d361212a4cb088939f1bcf5e88d4424f98ecc1a12cd006a | Triage

Sharing

General

Target

JaffaCakes118_92cfe6078d826c078d361212a4cb088939f1bcf5e88d4424f98ecc1a12cd006a
Size

860KB
MD5

c363297b89596af99041e134806a5dac
SHA1

b925b5e7659418891aacfd954b364a6501fa1938
SHA256

92cfe6078d826c078d361212a4cb088939f1bcf5e88d4424f98ecc1a12cd006a
SHA512

5e55f4d8e1583116e5a8d6ae5d84dd202aa167b1b98cb51bc71e1f0334a56721f726720884af01cb27a3dff83e4b09ea2bd732be6afe75295e9cd93270a89aa1
SSDEEP

3072:CNRCywDw1D9JzuTemqBK8pUuvEvsemaQL/v1NpooYYYYYYYYYYJ41YYYYYYYYYYg:CT4Dao9aMmQs9aQjaTuNeFATpt

Score

10^/10

guloader

Malware Config

Signatures

Guloader family
guloader

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_92cfe6078d826c078d361212a4cb088939f1bcf5e88d4424f98ecc1a12cd006a

Files

JaffaCakes118_92cfe6078d826c078d361212a4cb088939f1bcf5e88d4424f98ecc1a12cd006a
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 236KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 406KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ