General

  • Target

    d7af94a2573d53ab5f31db246c4b623e

  • Size

    296KB

  • MD5

    d7af94a2573d53ab5f31db246c4b623e

  • SHA1

    079c75d758fc1532c24fea9f7cb75031a138f383

  • SHA256

    c1c76734ce4c23b37c61b50136aee08a9a70e6f25b04ac481df85402be9286a4

  • SHA512

    83721213eac6398696b5b7a1dc39cadd41a2f54e038dc9cdcdaf4f4f4ae1ee2abf19298c9d5b6b4f815250481f28eefbeddfc60522fdb2ff4742e30af46efb08

  • SSDEEP

    6144:bsWXEYOd9nWwfNEfKLZXhoPSgc+I8j8qGyZxF74tWM71TQzJd+fPgoA0:b17YpvNYK5huNU8jZxFQWM71U1sfIo

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d7af94a2573d53ab5f31db246c4b623e
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections