modiloader | 8c859cc8961ad4c823ee352b3cf2d64be9e3b2847a210a3c0ec36ed572acb3a0

Sharing

Copy URL Twitter E-mail

General

Target
8c859cc8961ad4c823ee352b3cf2d64be9e3b2847a210a3c0ec36ed572acb3a0
Size 84KB
Sample221126-cc95ssgf2v
SHA256 8c859cc8961ad4c823ee352b3cf2d64be9e3b2847a210a3c0ec36ed572acb3a0
MD5 16374bb2dc52687a42af71e845913edf
SHA1 4d3d4575c500c87ae22f77fbc9d117bc2c3dd044
SHA512 1bbd40998d44fc1de54455a9acea839a35759cd68fa740c7de38f4490c7888352205a9fac7116175b61dae545719b7607144a5b3aba55da00803cce38bcd50e3
SSDEEP 768:5I3vElriR9D+z7p8hwrZBJ/oD6kFXQMMSiaWUMK:50j4t8hwrOD6kFXQVSiaW9K
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

File Explorer

8c859cc8961ad4c823ee352b3cf2d64be9e3b2847a210a3c0ec36ed572acb3a0

.exe 84KB

8c859cc8961ad4c823ee352b3cf2d64be9e3b2847a210a3c0ec36ed572acb3a0

SHA256 8c859cc8961ad4c823ee352b3cf2d64be9e3b2847a210a3c0ec36ed572acb3a0
MD5 16374bb2dc52687a42af71e845913edf
SHA1 4d3d4575c500c87ae22f77fbc9d117bc2c3dd044
SHA512 1bbd40998d44fc1de54455a9acea839a35759cd68fa740c7de38f4490c7888352205a9fac7116175b61dae545719b7607144a5b3aba55da00803cce38bcd50e3
SSDEEP 768:5I3vElriR9D+z7p8hwrZBJ/oD6kFXQMMSiaWUMK:50j4t8hwrOD6kFXQVSiaW9K
MD5 SHA1 SHA512 SSDEEP

windows x86

ModiLoader Second Stage

Minor OS version

Major OS version

Entry point

9340

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

656B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

428B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

75KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ