General

  • Target

    a27286814b5f9edd0fd6f7f1eb712ec3

  • Size

    296KB

  • MD5

    a27286814b5f9edd0fd6f7f1eb712ec3

  • SHA1

    c62e219268b1ab7192783a8df82ca33140b49dce

  • SHA256

    6650e9a8003673cb8b14fd5dd6ba2af75428ce3b30094e7ace5bd5f9e169e9c2

  • SHA512

    85a2f5649f267a1761c7dc12577746685f0b985d93220bfd583ee24e2d463649b930bf95aeb18a15e05d8a2c5cdd4928a24bf759681b8cb2dcf53dfb675e99b0

  • SSDEEP

    6144:ZqtRmHFzu6p4lmDfsZODbqpHP/ogOyRpPbRaQQ4wLsy/v/CiuF31xTLvZuXSx0:gtF6qm7wODCYgNppQNsy/3C/TLv8

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a27286814b5f9edd0fd6f7f1eb712ec3
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections