General

  • Target

    64db4a28f9683765d5d606e31cd14f82

  • Size

    45KB

  • MD5

    64db4a28f9683765d5d606e31cd14f82

  • SHA1

    429006218aad7c423e88eda9444ea9d7a50c8a67

  • SHA256

    f3ae468e85a163821ed7093f592d3c272fabcb5dd8cdbd8dcb8f8ad026cf7458

  • SHA512

    dab9dea0c718a4602ae9f5705dc0401c94b53c6fc6ac3040abdbdd4b08a11d3d0f6c3e7be5a76a0910cb510c34d874fe931b123d9febb506128911fe60139c23

  • SSDEEP

    768:7eMFfFkb5v1aMXVyYUAEGe1xLQzeTVfSzK4GehMKz3z9+1+RHBZoaS0dxAs:tFNkVvTzUAEGeAzeTJSWZmDXRhZoafDv

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 64db4a28f9683765d5d606e31cd14f82
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections