General

  • Target

    065b2d1031f076b64d36e0388f2e42aa

  • Size

    94KB

  • MD5

    065b2d1031f076b64d36e0388f2e42aa

  • SHA1

    1bdc00278d19b52173cc0c1c25bcd0e1582a3cbb

  • SHA256

    1f3c90b57e79fc9b9ffcac77fd2003c53b68b44f34b65fb1bc0016331a2593e9

  • SHA512

    dccf8026ebf593e795fd5c426eed9c60823b3fccbf4b43842b7c34501871b16463f5ee9319c7d55ae777a2188d22aeb516ee62873addcc99abb5eb3f3dc13742

  • SSDEEP

    1536:f8gKXD4lYp+FGfBoPBWNdNe0RjoypTvMfx6Bvb5JidW2ATW6046mQ:f8g+8WGkdA091kfUBj5JSQI

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 065b2d1031f076b64d36e0388f2e42aa
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections