General

  • Target

    9b31cb73ebc6bfc889daa612412edfb7

  • Size

    365KB

  • MD5

    9b31cb73ebc6bfc889daa612412edfb7

  • SHA1

    bd4cd3b8db0536875915109860345c98c6bb8ac7

  • SHA256

    d36043a7e8fe6382208d8ebed686f27c71293770324bb95d40b981f4f7dc82e3

  • SHA512

    111bf3da1f716b56c2df6c52bfa8f4aca614f4a82dff04ce04c43c4ee457e8cc3f548730714d09aa695b2eb7f9cac1ac7d14ce4ad77085309b9840b9d1e3dbb7

  • SSDEEP

    6144:FJQwA+x+RNsL09+n/n473alhpoy+2Gco8Q4Oda3y2lLV5LGo9d8IuqJ983KxEIq0:FJRNLo9+n/473a+FhQOey0LjLGo9dSq3

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b31cb73ebc6bfc889daa612412edfb7
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections