modiloader | accf30d1e31e69eb41263cbc9dce7ac5fa4d474447516232a26588d307bbe242 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

accf30d1e31e69eb41263cbc9dce7ac5fa4d474447516232a26588d307bbe242
Size

678KB
MD5

f41987ab6e879208d8c4f349c0a9cbf2
SHA1

a6e4a539db6749b1e58bc14d42706dcf6745a6ee
SHA256

accf30d1e31e69eb41263cbc9dce7ac5fa4d474447516232a26588d307bbe242
SHA512

05197c32983be8832c7896c8f8827bda566b8bf1b0502b6856b51d31ff576a7f56818f99326c22ee96aefe0c995ef59b9be16bf9c269d98957be722338848123
SSDEEP

12288:+CDD+up0OkziL/dKEnqCb8DmrZ8Asu3dU76rT3A:nrphkziR/npxZ8AnrT3A

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Files

accf30d1e31e69eb41263cbc9dce7ac5fa4d474447516232a26588d307bbe242
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 611KB - Virtual size: 611KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 22KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ