General

  • Target

    f1868c1750fe09ade92489847da5edc4.exe

  • Size

    65KB

  • MD5

    f1868c1750fe09ade92489847da5edc4

  • SHA1

    c85923588815b934f543e084733b06efe1a606e9

  • SHA256

    eafc9d60981969ab0d836893d1105c05fa6acf9c6891683ee3371dc6df3e4d88

  • SHA512

    a2a4e1e903627ac9df42f91b263128c213a846c6f39488049880a7dffc499af612a2bae5e51550b2c36f2971035e2271950f9d0d21b6571ebca382665292a8b5

  • SSDEEP

    1536:L2god87Lw7TKvDOgYg0J8LB7K0EPRNc/Lg7Wink:CgnvIuDRrg8Lyms7jnk

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f1868c1750fe09ade92489847da5edc4.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections