General

  • Target

    29baa7bf4b6f03b9fe34e334a62a92ac

  • Size

    245KB

  • MD5

    29baa7bf4b6f03b9fe34e334a62a92ac

  • SHA1

    cd84391b4340b9737bef39cb36cc70989bfa6e00

  • SHA256

    71f1aa1f677aca2c92632fb719eb3bb4a481cbdc051fea8aeb61e503c883c048

  • SHA512

    0afb7c483a8c175d7036acfa30d9e1cc88aa75e814c5b121398b8e46899c2f829e274a8751ff487e7e1d0899abe3adf52ef00c10721d5c319f7aec32902564fe

  • SSDEEP

    6144:vRQytGm6IiHNwlwQ2KkIxRriGGs1bk9U7kvMJ0a0sK4hPW9pr:Tgm6IK2R2GLbB7k60a0sq9pr

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 29baa7bf4b6f03b9fe34e334a62a92ac
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections