General

  • Target

    091c5a964683ba62f38ef111aacd1d49

  • Size

    233KB

  • MD5

    091c5a964683ba62f38ef111aacd1d49

  • SHA1

    2b124933c40409482f3583af02160dbe832ce5ec

  • SHA256

    cdf6f848d8c68b8b521f675a8129292b120d08c8673ebd3619ad230a388a84cb

  • SHA512

    013c7609b062885cc5283d441203a13bca6b38a1c8bc043d1eba0245fd088e833f141861a1e9e2cda4fc3406fb539668119494c065313103edb154d0dae1bc70

  • SSDEEP

    6144:sLiX5MU9Y2jd58njRL4k85uMQVMX7tV13xqCwk:Lpd5YRLi5uMQVMXJnBq

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 091c5a964683ba62f38ef111aacd1d49
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections