modiloader | b55befc39e41926cc1ef5e826a17cb0a3945eb45eedfaac1d831ceaa3a22c94d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b55befc39e41926cc1ef5e826a17cb0a3945eb45eedfaac1d831ceaa3a22c94d
Size

439KB
MD5

07cd299d939b50932b3b24c5c7d67cb8
SHA1

23ea8eaa6361817adaa26928264ecbb6090a8543
SHA256

b55befc39e41926cc1ef5e826a17cb0a3945eb45eedfaac1d831ceaa3a22c94d
SHA512

a87eddad7a3fd736e10e973a6ea1ae769c84c31c2acae3a9994856b003d8bc12a83fc302999fd3e371b46e002725cede1ef868f199396d0f97a12783b8682948
SSDEEP

12288:BOav7OkcHdwVkiMTVwAXgZGVAzzHIUxgYHYxQ:BOa61MkiWaTGObIo

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Files

b55befc39e41926cc1ef5e826a17cb0a3945eb45eedfaac1d831ceaa3a22c94d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ