modiloader | e4e90d2701acf5dc70247f2adea895e3fe52e2da5843a77899fb65d706078cec | Triage

Sharing

General

Target

e4e90d2701acf5dc70247f2adea895e3fe52e2da5843a77899fb65d706078cec
Size

21KB
MD5

1d742e4cb4c40f4c615db13e9f9d324a
SHA1

e507a373d92389af6908b3590dda8c06b951dfac
SHA256

e4e90d2701acf5dc70247f2adea895e3fe52e2da5843a77899fb65d706078cec
SHA512

41e7d7e4108a7616b2991efdcf86c9239a865da1823eebcac7506fe36c243e6baa56ca7d9778c71f2fcd6498f8919384faf1033eb8e7210a36503da55201a591
SSDEEP

384:aFRdCybMqlWgmQ2Hd/RizVVGf7kINGUoVaCm3z9zlCtlR:kCyQqlhmQQOVGf7kI4ra3j95ib

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Files

e4e90d2701acf5dc70247f2adea895e3fe52e2da5843a77899fb65d706078cec
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ