Behavioral task
behavioral1
Sample
1257cc29f0e6d3428603ac7cf72f2118.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1257cc29f0e6d3428603ac7cf72f2118.dll
Resource
win10v2004-20231215-en
General
-
Target
1257cc29f0e6d3428603ac7cf72f2118
-
Size
33KB
-
MD5
1257cc29f0e6d3428603ac7cf72f2118
-
SHA1
80311c4f7c1ded931afe3131515ec398067bc9c3
-
SHA256
662fdfa2432f328d050300bc1872540c3fb22bf985479d736e6c0479ffd98ff4
-
SHA512
83f35c81ba08e92749095e6f5af079a6e0a396ca345a3d504c80ed259e43ceb42e3f6261dd0147248b83d13774784df2613bf8ab28cd692e80ede0e7d89a2768
-
SSDEEP
768:Toi4qZOLQVIdLyq5OpBlashFVEPgPnbKr6vXHmQJ9QuZ:Tv4qZyQVIxpOpBlasPVhPnb26vouZ
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1257cc29f0e6d3428603ac7cf72f2118
Files
-
1257cc29f0e6d3428603ac7cf72f2118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ