General

  • Target

    979ae583b77ae8fbc18e0fd89a99797a

  • Size

    86KB

  • MD5

    979ae583b77ae8fbc18e0fd89a99797a

  • SHA1

    7a9ca180e512ec592856cf1504eff119bd59b688

  • SHA256

    69842ae5476580141b1a027761845cdb5a47d5b00d88825b7af57077f6d7112b

  • SHA512

    caa1ca2b25c9cfbd34d6c64a7c4e3bcead41d5f625221664ec9a797d3b144016eb700c8fdc913ae66bdb9153bedd95debb3060171b4524ea7082d368df0357ec

  • SSDEEP

    1536:scHA5dZuvrKA1r4Jwwi55dlvo89UBYKpJ0pHWG7m9pAsiyRsUuh8iO70Lt:scg7UrKqUwflAZYKX6aAsiyunQO

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 979ae583b77ae8fbc18e0fd89a99797a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections