General

  • Target

    fee8cf9a63e7ba3410498e29d22343c9f5909c497cd698f8a297ba71992b12ba

  • Size

    18KB

  • MD5

    46186d75aedc2e4cc543b8fc573538cc

  • SHA1

    473f73aefce32ca739328bc23c0a5a00ecd6812f

  • SHA256

    fee8cf9a63e7ba3410498e29d22343c9f5909c497cd698f8a297ba71992b12ba

  • SHA512

    d2a25f74c4be85b39fbb38a159a715fec22d7da917da3b03e8ed82d36feae522da380b5c6ac0784a1d5a895ca6e595e44afed09ece49d1687780087fd9f99bfd

  • SSDEEP

    384:dEw7wknHOYXQdhLGPvCaV4pLS7OGQ8xy1Czc2mO7taGne:dEw7wkHOYEGPvCaV4pLzb1f2mGt

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fee8cf9a63e7ba3410498e29d22343c9f5909c497cd698f8a297ba71992b12ba
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections