guloader | JaffaCakes118_f2363a7a8dfc7890636dd71713f5b3f77b5073b24f109323fead5d27c0dce9cb | Triage

Sharing

General

Target

JaffaCakes118_f2363a7a8dfc7890636dd71713f5b3f77b5073b24f109323fead5d27c0dce9cb
Size

860KB
MD5

6c34352c00fc527fd3e2d006f7b153e6
SHA1

e74b2991adbf1ed00ca5053e88c4b0d096fa9e84
SHA256

f2363a7a8dfc7890636dd71713f5b3f77b5073b24f109323fead5d27c0dce9cb
SHA512

0928d3607d82f4dcf158b993e929d6841b1fedb990aef6257d226cc0c7af0834702274ced5d0cabf5ded961c64b5d0f4203b5142ae7df6be75b78f2b596fd4a2
SSDEEP

3072:CNRCywDw1DTJXutemhY82oevCvsemPrL/v1NpooYYYYYYYYYYJ41YYYYYYYYYYHq:CT4Do69hzWSs9PrjaTuNLOx8Tpt

Score

10^/10

guloader

Malware Config

Signatures

Guloader family
guloader

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_f2363a7a8dfc7890636dd71713f5b3f77b5073b24f109323fead5d27c0dce9cb

Files

JaffaCakes118_f2363a7a8dfc7890636dd71713f5b3f77b5073b24f109323fead5d27c0dce9cb
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 236KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 406KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ