General

  • Target

    299ddd07f628d511360892579119080f

  • Size

    20KB

  • MD5

    299ddd07f628d511360892579119080f

  • SHA1

    0dc981d38eb80c3fe63702c7c6babc44edbe279f

  • SHA256

    c6ebd2c844acc68a65c8535044fe3738d383bc4210fda3bfc76ba6c04a46e67a

  • SHA512

    379e7c6b7f519814e3289461d564431678d4c86c3a2f7bc9369a8a6b03115eeb4eed167c97ac3740e5778730e8f464565cb12e949d6cd2f3ad2552a9dc724923

  • SSDEEP

    384:6bv11gmzXrzXB6uXQ0o8oD+C48QOjSxymMi01QZqp1gVb4VIkWT2lWt:6bv11L3BotRdPjSBMeZqp6iVs

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 299ddd07f628d511360892579119080f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections