Behavioral task
behavioral1
Sample
c9ad06f431b4d39a8c6d26887a4c7ef578f37111da82c05b77c3d572592c2a6f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c9ad06f431b4d39a8c6d26887a4c7ef578f37111da82c05b77c3d572592c2a6f.exe
Resource
win10v2004-20220901-en
General
-
Target
c9ad06f431b4d39a8c6d26887a4c7ef578f37111da82c05b77c3d572592c2a6f
-
Size
784KB
-
MD5
70778ecfd0d16eb4bdb5440319045950
-
SHA1
d4720bb8d9d1b779eb9deac9fca95cfb4bce8097
-
SHA256
c9ad06f431b4d39a8c6d26887a4c7ef578f37111da82c05b77c3d572592c2a6f
-
SHA512
f1f9af9d8f592df309b488c0fc44a2e423436afd11bfda1f777f09e32384fd0a23014343d1b0425a392d1d5e90e54bf4915ec73997b7b854940c6d43582ba507
-
SSDEEP
12288:QJ4vdHo7bNNoSXxIY1IFEJOC8qIxkYZS84OdfhI5zhvUgCpWXT/+:QJuIPrXxIY1IFEJ+hx1N4Aqj8gCoXTG
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
resource yara_rule sample upx
Files
-
c9ad06f431b4d39a8c6d26887a4c7ef578f37111da82c05b77c3d572592c2a6f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE