General

  • Target

    xpopup.exe

  • Size

    466KB

  • MD5

    021d6854d1fd38940d2c880ff96e5a68

  • SHA1

    5db01633c97558ed31d0a1e57cdb5d1c0f19fde6

  • SHA256

    c0543781cfcaeafda1ad2c2bafe7b1dbe742313c7d67382e3dabadaad669bcbf

  • SHA512

    0af7b7c249382b615a9e6d91a67842db2b1c19165be801e2171c920b11737c49a627ff6e916082d39fbecd0f3aed951b2339c84e7e40f5a74a398ebdaa8dfce6

  • SSDEEP

    12288:r5jceGOnUt8h5WVPrF/UqyWxSa/5NWgdFmAJF6jd:+ezU8ErlzWgdwAid

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • xpopup.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections