modiloader | 8be414a7a7ab8feb591815222c862274

Sharing

Copy URL Twitter E-mail

General

Target
8be414a7a7ab8feb591815222c862274
Size 16KB
Sample240203-kk2gmafffp
SHA256 9252eb742965464c01f4a085098e73c06ebbeb3449e8e8afe3f020f4945c0aaf
MD5 8be414a7a7ab8feb591815222c862274
SHA1 9bdef0838ed9dc806b16a92ef63a43a0e78db91b
SHA512 a305274a85c36f8c92b52c19c2e6e13b2719fbd59de03b27512df4928717ae37e2bfd79161d10c974a6bf7a6e4a7654ad13cd43cb88844d9e012962334203eca
SSDEEP 384:skOWerq8wvGtZfsz6pJPbNGYQzyW8m1T0+zSQ5:nOWerqdvQVsz2DcYAvr1QuL
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8be414a7a7ab8feb591815222c862274

File Explorer

8be414a7a7ab8feb591815222c862274

.exe 16KB

8be414a7a7ab8feb591815222c862274

SHA256 9252eb742965464c01f4a085098e73c06ebbeb3449e8e8afe3f020f4945c0aaf
MD5 8be414a7a7ab8feb591815222c862274
SHA1 9bdef0838ed9dc806b16a92ef63a43a0e78db91b
SHA512 a305274a85c36f8c92b52c19c2e6e13b2719fbd59de03b27512df4928717ae37e2bfd79161d10c974a6bf7a6e4a7654ad13cd43cb88844d9e012962334203eca
SSDEEP 384:skOWerq8wvGtZfsz6pJPbNGYQzyW8m1T0+zSQ5:nOWerqdvQVsz2DcYAvr1QuL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ModiLoader Second Stage
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

816B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8be414a7a7ab8feb591815222c862274

generic