General

  • Target

    266226e2e7f58bf96131ebea14f69796

  • Size

    203KB

  • MD5

    266226e2e7f58bf96131ebea14f69796

  • SHA1

    9c5152df76f61ac9a42f50037e1bd0099e59ec4f

  • SHA256

    fa980e4207c5ab714b2614352d4ec42711e2b5028e1a98811d52948f87311c0d

  • SHA512

    f3d0d0648fcf17ab2ece65b11a18d41aecd5a7962fd2c55bb5ce6bd1a3953eda6b1e93365c1df7c73ea50cc13f6aa698e8638196b2faa0851dfe18fb8120d10c

  • SSDEEP

    3072:x1KJy7COkfskVj29rp4FigT036XsGRHayepgs/4RIHB8r0roUhSwEDY16lunsiaR:x1KJyOOkbQuPGGTHaXu7iHB8LaE6uus

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 266226e2e7f58bf96131ebea14f69796
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections