modiloader | VirusShare-002babe29772013f178335001aabe1b0

Sharing

Copy URL Twitter E-mail

General

Target
VirusShare-002babe29772013f178335001aabe1b0
Size 180KB
Sample240202-138xeshbb7
SHA256 7592e0538ab25ad3091fc7c0867886e99f92b18b722618c2f5c31773516c20d2
MD5 002babe29772013f178335001aabe1b0
SHA1 7f56422aa3f0fdb3e9fe2ccc2001c3c6f53f9879
SHA512 10fad60c03936f340dfdfaa392da51ac448bc17de3e6b9fa1093c8ca8fe7b749ef42c6b2796831f89b37198579177c799fe782a296f490fe274a41cb1b800152
SSDEEP 3072:ojO3JSQLLnpLFJiCtJkvcCDF4dmx367mdfcOFVFMyji3Q4we4vjDFi7wVF:oa3JSQvpPaD+dwKCdf/VLji3DwFvQCF
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare-002babe29772013f178335001aabe1b0

File Explorer

VirusShare-002babe29772013f178335001aabe1b0

.exe 180KB

VirusShare-002babe29772013f178335001aabe1b0

SHA256 7592e0538ab25ad3091fc7c0867886e99f92b18b722618c2f5c31773516c20d2
MD5 002babe29772013f178335001aabe1b0
SHA1 7f56422aa3f0fdb3e9fe2ccc2001c3c6f53f9879
SHA512 10fad60c03936f340dfdfaa392da51ac448bc17de3e6b9fa1093c8ca8fe7b749ef42c6b2796831f89b37198579177c799fe782a296f490fe274a41cb1b800152
SSDEEP 3072:ojO3JSQLLnpLFJiCtJkvcCDF4dmx367mdfcOFVFMyji3Q4we4vjDFi7wVF:oa3JSQvpPaD+dwKCdf/VLji3DwFvQCF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ModiLoader Second Stage
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

200B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

948B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

328B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

VirusShare-002babe29772013f178335001aabe1b0

generic