General

  • Target

    6581c4ae5892d209c1f8e9a3b8fccce0

  • Size

    374KB

  • MD5

    6581c4ae5892d209c1f8e9a3b8fccce0

  • SHA1

    703484fa22c27f006918ce5bca2c8016b857e31d

  • SHA256

    c64b64a14fc123fef4f090f98a7fdacfdc9b142be2391f356b0971c449f659c2

  • SHA512

    2f47a9e295258af406f7c325257f5a988cee0f03c5a22960bbafd78faffd0a46c2f956ea46ed7969edc8e1b0acd732c713a61a9845392ad3e117f6ff8f8f3ef2

  • SSDEEP

    6144:9KNnTwABk3ZFno+T5OhN42eqaEe2u2mVdXYrBL3MBqsLYf0u0r:eT5W33VQN4lL72gYzmR9

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6581c4ae5892d209c1f8e9a3b8fccce0
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections