General

  • Target

    3a838bc54c0554072f59a12f2d4cf1e2

  • Size

    296KB

  • MD5

    3a838bc54c0554072f59a12f2d4cf1e2

  • SHA1

    71b6bfdef3a26e78f4dd6022ddf4ec8df0c12dac

  • SHA256

    bcf6ce631e7426af22013451da9c86e988dc4c10623c6f4952a59568fb9abb35

  • SHA512

    a101829a89798fa3e27da6ce8a1fd3437adf9340251fd8c7a9c78a0cf64086f362d31c73d93c1b79a7242d12376619b82a3f719517f0da2f06bab08482c50ea1

  • SSDEEP

    6144:sqtRm9s7xDtEqBR8xlS7lKIlz7SnoxyG0wMoizl6pefxAORZALcuRzYB0Nw0x0:ttA6DlRIIlKINZxizWAx79OvS

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a838bc54c0554072f59a12f2d4cf1e2
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections