General

  • Target

    e769fe5993c5e3a28432319d9e28cc45_JaffaCakes118

  • Size

    294KB

  • MD5

    e769fe5993c5e3a28432319d9e28cc45

  • SHA1

    e6f2cb7d71596ee39a45cb1c2d2e87220795db2f

  • SHA256

    abecee861e0311642dbcd28e48d10ff6673ad999f060db3d50a44f3c2558c730

  • SHA512

    e0f7c3d257900d518ece398e6e1577298d15c399e45e3433630853f42bbc86f844869fd6cf59501dca50aff8b5689a797db2d9b9c907418021cf08ae0e98ab9a

  • SSDEEP

    6144:i4hJQM/KsXoMDGWmV9Jw9DY7yQue0VkIdrbsbo/V3cYC9hUdkv4cwze7ebL0:iQJQIldSNqlYCeq/rYE/VMYC9hakxd1

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e769fe5993c5e3a28432319d9e28cc45_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections