Overview

overview

10

Static

static

10

05b8a7f070...49.exe

windows7-x64

10

05b8a7f070...49.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    05b8a7f070588e2a3c6cdb81883def49

  • Size

    203KB

  • MD5

    05b8a7f070588e2a3c6cdb81883def49

  • SHA1

    310203dfad1b57b6d644736701765c5d5dc18991

  • SHA256

    91dbef5bd9272722b8878a9d44f02121c6e478262597cf860b0e379de9c1ca08

  • SHA512

    51a2fa02a9c0b882f8ba033b2512e5d1e8bf00a20ca5282a277e64fe124f0d0affb2d7bb598cba1266cb6b3c88f23b4d9954330282948a50ed25fb4d84f0e2d1

  • SSDEEP

    6144:T1KJymOJtwdQo0SD62o9pf52/v2zrNMtLq:TzZUd++CpfdXNs

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05b8a7f070588e2a3c6cdb81883def49
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections