General

  • Target

    SigloWEB1.exe

  • Size

    3.4MB

  • MD5

    74719c40fdcdb7bfb77249c4355ad998

  • SHA1

    912479b013c2d1aac03ca17e47be2e9003a868ed

  • SHA256

    a8419b40b08010ac4280ed6af48ca614ad25d472da403d6f6acaaaecc62e73aa

  • SHA512

    3d19596ddba8482ee25c343420b25b0d1e5303d2f3df5064c9fd34dba79c0a1e6c1d94f4afd37d7de6f743924dd0cb226d3c095e0ca2503ea30cdba63746b1c1

  • SSDEEP

    98304:tAT62/yA5J2XJuD25V7RE9C3mUN3eMfth+1MWw2DPS5wvViBhwKtaOkaC3p:U4PXJuKzROweSYbxDKoawKQTaC

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • SigloWEB1.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections