General

  • Target

    siglowebold2.exe

  • Size

    3.3MB

  • MD5

    341e6118300427eff58d3da5f1b9b4b7

  • SHA1

    26e236c308fd8b7f6a6fec3dd2790e039ecbb7e7

  • SHA256

    6df93ced6c976c448553f7abaf828e4d02f121eedcc47134036062a4151d4bc3

  • SHA512

    4348b7db8be86211ef41f58b4fc5c16c527c4015947e29e409c2174caaa23a2010b81256d31a7e1b5a93f270c725efa58f307f515a7cb858c37c1a657998934a

  • SSDEEP

    98304:4IRh2HdK1x9Z2EpfJJKHco8GuBdHoMgY8TUK8onkyUlE:4x81x9Z2d3iRoMCwK8onDUlE

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • siglowebold2.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections