General

  • Target

    372f01c2ca8b66f584d1981458f7d085

  • Size

    51KB

  • MD5

    372f01c2ca8b66f584d1981458f7d085

  • SHA1

    ac1264a201fd4c6e05cbd7d27291ec47046a2e15

  • SHA256

    84a0edbf3f3503d3d50eb0ffcdae27add8ada152387ec4c804979a2925c4a8da

  • SHA512

    73d234906f5ae66d4cd2dad543ec7db0956353d28ec0af7e4cb6daab1e58c9900193dc60aeb546726618c68d99dc5e96bf538cf3933e3f6e8bba7fe1a2bebd3e

  • SSDEEP

    1536:QFNkVvrZJ+3fzgwjpdhmE6GamDMVg0PVbIeTOodCJ:QFaRVJ+3MkpTmPmDMBttTE

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 372f01c2ca8b66f584d1981458f7d085
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections