modiloader | a14762ac22a0b5bfc95f2f756984b3d82dfcdf50352fe1f6fe49c112858cc69b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a14762ac22a0b5bfc95f2f756984b3d82dfcdf50352fe1f6fe49c112858cc69b
Size

94KB
MD5

bc896def657c76015c8631b6c358aa20
SHA1

201f13576dda40d3a681c2adf0f1fe7b8fbdfc4d
SHA256

a14762ac22a0b5bfc95f2f756984b3d82dfcdf50352fe1f6fe49c112858cc69b
SHA512

04380b134f659826f4ce2acb4e232fd247bb0a8cf9acf3437fc54830994aabc77680b6965edacae87ea08048e13c6ab6c3aa0a109b4a990ae2f347ebcc7738d4
SSDEEP

1536:BC2qEQug2dM0EidpeQMbuoiTBoPDAlMvSLfwlFY2UkfnQ6c+Zua3iphBX9:B7bxdMQMu9TqPElMvSLfwlFrUk/g+Z5C

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Files

a14762ac22a0b5bfc95f2f756984b3d82dfcdf50352fe1f6fe49c112858cc69b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ