modiloader | 28b5b0fdc73004b19eeb080f5ffd3c367eac57cefa47c1f36ddec055f9d6c4e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b5b0fdc73004b19eeb080f5ffd3c367eac57cefa47c1f36ddec055f9d6c4e7
Size

651KB
MD5

d9090d3b061ff77b45b7217c7448cf3b
SHA1

d4cc5d72d4f08d516b5ab0657d19e9b1e9103b06
SHA256

28b5b0fdc73004b19eeb080f5ffd3c367eac57cefa47c1f36ddec055f9d6c4e7
SHA512

9e46ea265e20294230f9952ae05343585925859b4c6e275765b67d1fd3f2ae36103ed95215dbe9e5f49af5c2efb8672375e832c653d480cfacf3cbbc53c997dd
SSDEEP

12288:kpyZT1krCxu/mDwLRI6BxcDqp9aqCcajVuD3Z7BPQGMWYur0s0D:kUx1kjOD3SxcDDcNDqWYurL0

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Files

28b5b0fdc73004b19eeb080f5ffd3c367eac57cefa47c1f36ddec055f9d6c4e7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ