modiloader | e58415a65504faee48e04d939d55204bed53d0adf384c5f5b24a1c1c56e27660 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e58415a65504faee48e04d939d55204bed53d0adf384c5f5b24a1c1c56e27660
Size

1.1MB
MD5

c4b3c587570b26d7c5b3ccad544b7f1d
SHA1

63ce267acc405ccfbedbaf70fb5db20bbb4a9832
SHA256

e58415a65504faee48e04d939d55204bed53d0adf384c5f5b24a1c1c56e27660
SHA512

5f1ab28528e9edd1345a1387b6f72f2d0e54cbf529f5d697c117a1861b23ca9c1623d07e5be761d4743b47246b46d869a396f5dae0de8bba67adab53b3c042e5
SSDEEP

24576:LLg5UGcBaEU60304jRlvTVTpVJccCd5e7J6sV/2MK:L3/IHTVrJorUJQMK

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Files

e58415a65504faee48e04d939d55204bed53d0adf384c5f5b24a1c1c56e27660
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

packerBY
Size: 760KB - Virtual size: 760KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE