General

  • Target

    296eba909e2f817c28b25b6d2f266912

  • Size

    125KB

  • MD5

    296eba909e2f817c28b25b6d2f266912

  • SHA1

    649ba86f2c9c260c14895ec31e9aaa0a71707d6f

  • SHA256

    d4f01066561eda6e1c0d473f1d6e45daf16e676affafa5bb3996ce249d0a2bc8

  • SHA512

    a3bea3545facb761baa9cef51f7f6bf54bcf6b00a64738281229049df414db3f53c5961a8662323e6e3aa4e00ec4f1076b4bc41c37b414c5b0c9f5b3d5d04e7c

  • SSDEEP

    1536:GIqlamQItiARDHlq3zQfapU4fARzVv27xgFqTE6cFCmivsXSHT7IUOGk:WAqD2zRpU44RZv2wqTOCfv8IEdGk

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 296eba909e2f817c28b25b6d2f266912
    .exe windows:4 windows x86 arch:x86

    7ac9fc989be97c86082a02d29f116422


    Headers

    Imports

    Sections