Behavioral task
behavioral1
Sample
7347da26fc9c5eeb26cccb9067acd336.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7347da26fc9c5eeb26cccb9067acd336.exe
Resource
win10v2004-20231215-en
General
-
Target
7347da26fc9c5eeb26cccb9067acd336
-
Size
413KB
-
MD5
7347da26fc9c5eeb26cccb9067acd336
-
SHA1
fa1bbed26067daecf11eb0c1c36d6771589359d2
-
SHA256
c235a9eee3e8b20781798d170fdb71a1852f8d675ab9577c8f7a125ce7e85a1a
-
SHA512
11bde0644d5eb5acf7eaf86e9433edbce9dfffd7ab9a449e0c9c729ac1cbb9895bb550ab968f54808e3aa44c8cc8f7eedf6783d41f1109c8a26f7d54ce62da4c
-
SSDEEP
6144:TGyjnBSkuV1d4eZd88ORJIf/wTBQ53THPpctToSQV+UWhlpake:iYnBSkuVUeZdYqwTGHPOoSrjAp
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7347da26fc9c5eeb26cccb9067acd336
Files
-
7347da26fc9c5eeb26cccb9067acd336.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE