General

  • Target

    58a5dea0273ab8471e92e807f25bb95c

  • Size

    310KB

  • MD5

    58a5dea0273ab8471e92e807f25bb95c

  • SHA1

    0b1eb4d0773acab1483f75b6800b6c89372166bd

  • SHA256

    b6ba5b15cd7d4c0ab035929e55f35b4b9b0259e2ca404cd6b032f8058d447754

  • SHA512

    b706fdaaf888b5b30625701076b764c16771d1d9289a8335a98ecffbf32530ad2041487d64c5d4b3ccd7cefa6ed49e767dd25128932c4283a55f15f1ac5c809b

  • SSDEEP

    6144:ShWSf/+dpZ+5wJPJ5Qayjv6dedrCmbRDrGdN4HX2KQoHwvXdD4MRVC:QWwmes4vIeUIGdyHX2KQoQvN8M

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 58a5dea0273ab8471e92e807f25bb95c
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections