General

  • Target

    4789e6dc933350dac0a7a34120e4a9cb

  • Size

    33KB

  • MD5

    4789e6dc933350dac0a7a34120e4a9cb

  • SHA1

    95fda6fbe5d04a66b7734fc23d2e41e67395c021

  • SHA256

    774a5fb322d9073f0d5683fddd755bb468e0775bd61ff1f4f2cbea5c1b2e3732

  • SHA512

    027fdef1c60648488a3e071fc5dd7049ecd6a98edf9853d3498bc5baa780caaec3d4fd98e3f6bda973cb6a0e7e40453e85d287c74a24d684c639dbb730e93e1d

  • SSDEEP

    384:Dbv11gmzXrzXB6uXQ97OLh/Pra5b9drP+2frk7l+oiPsxKRBieD3pUFdncVA//VO:Dbv11L3Bo97OLNu/1oxlE/6qA//GR1

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4789e6dc933350dac0a7a34120e4a9cb
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections