General

  • Target

    7091cfbb2125ed50d81a4bcc2bd9d62a

  • Size

    199KB

  • MD5

    7091cfbb2125ed50d81a4bcc2bd9d62a

  • SHA1

    5723dce633bb034c819368b3e029aedbfe5a05e0

  • SHA256

    d70f4af5fdaa3fb5a5c149a5e4d6fd0199482d382e3bd4b5e1df2d5e5c18287b

  • SHA512

    4872ea917606ec23bbe51f698e55578ce1bbb2ab164faa899bbcc7a2ab423661d607cf36ea12b73909dcab4d5cb763b62beefd35ca46d40607304b5d5069565a

  • SSDEEP

    3072:ZgibOoxVPnaK2KSDrlLwBfnJyBUIKVWXQlm4bQhdzl9Ye41LZ4C2FyOR25kKwJl+:ZgKPaKmLeeUESS5l6NqyC28N

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7091cfbb2125ed50d81a4bcc2bd9d62a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections