Behavioral task
behavioral1
Sample
e4cbd1a009376d44e5082b8aca14fda6f8f718804218bf4b4a38223650fb111d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4cbd1a009376d44e5082b8aca14fda6f8f718804218bf4b4a38223650fb111d.exe
Resource
win10v2004-20220812-en
General
-
Target
e4cbd1a009376d44e5082b8aca14fda6f8f718804218bf4b4a38223650fb111d
-
Size
380KB
-
MD5
0037828451da192640abaa7192d57809
-
SHA1
487593376a5953b2a9c53eda43c0a1455f045c5f
-
SHA256
e4cbd1a009376d44e5082b8aca14fda6f8f718804218bf4b4a38223650fb111d
-
SHA512
b12dce0dabd70eb6499cf4f22e2ae1ac65b10710908ebfa044dd2cc7409466caaf70ad2b3678ab432c9dc05d342271e4faa092ee5087e98153ba4ae15e745012
-
SSDEEP
6144:r+KkCrIU2ykH2ipsPnafFlerkb3Lrt1IKUhNtGeOc4ffDB4D:r+KbrIjXnOitlt3N1IZoeBsDB4
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
Files
-
e4cbd1a009376d44e5082b8aca14fda6f8f718804218bf4b4a38223650fb111d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nfJBg86 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nfJBg86 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE