modiloader | 20230517540be02a40617bbf1fec190f22f7ff54kovter | Triage

Sharing

General

Target

20230517540be02a40617bbf1fec190f22f7ff54kovter
Size

426KB
MD5

540be02a40617bbf1fec190f22f7ff54
SHA1

4d68e245397cf592b534f5f8040c5ddb2d72cee1
SHA256

e309ee2e008c2ecaa201c6effae22a9ed3f5a965de077451925742bb04f5f6ce
SHA512

b7713b4805ccc34acacf2c515a08e16d0a57df873f4456e9304220fdf7ebe5df24f55ed2a808eb486e5ec9ee583b3dd195509f4a959ceb38035e5e818fa6c459
SSDEEP

6144:pPYvdX802FeMzHYscFqiW6aZFzR8V5dxclI50ah0iEQoXKIr0h4GO1J+d/Sg+v88:pk802sMbYl95Hcl2rYtXKIr0LOsP8

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20230517540be02a40617bbf1fec190f22f7ff54kovter

Files

20230517540be02a40617bbf1fec190f22f7ff54kovter
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ