modiloader | 0416c5d3a1699a45cf6651c931dc5063a1e1a00f4c3847dd7876a9c9b90ab2fa[.]dll

General

Target
0416c5d3a1699a45cf6651c931dc5063a1e1a00f4c3847dd7876a9c9b90ab2fa.dll
Size 284KB
Sample240515-bdgdfahf93
SHA256 0416c5d3a1699a45cf6651c931dc5063a1e1a00f4c3847dd7876a9c9b90ab2fa
MD5 3af6027d8bc971d8d6892010cbd28687
SHA1 3ce1aa65c5e8935bcfa66ae550e410153f690b35
SHA512 e6589fe57a6068ac2fa9ca2b8169295f854f2abdd3809a3369c306e603e78a9641706fefc9947d2125d43742c7161383860f0ca61f3f91a878e3f2ca5e848ff0
SSDEEP 6144:YQ6PpOjD5gP+GGFqCl8VabJO2NRPS1AnWlnrE/HFuilU2pnd1hPWnU0f79u2tghz:6OjDmFA8uEe42lhMMw
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0416c5d3a1699a45cf6651c931dc5063a1e1a00f4c3847dd7876a9c9b90ab2fa.dll

File Explorer

0416c5d3a1699a45cf6651c931dc5063a1e1a00f4c3847dd7876a9c9b90ab2fa.dll

.dll 284KB

0416c5d3a1699a45cf6651c931dc5063a1e1a00f4c3847dd7876a9c9b90ab2fa.dll

SHA256 0416c5d3a1699a45cf6651c931dc5063a1e1a00f4c3847dd7876a9c9b90ab2fa
MD5 3af6027d8bc971d8d6892010cbd28687
SHA1 3ce1aa65c5e8935bcfa66ae550e410153f690b35
SHA512 e6589fe57a6068ac2fa9ca2b8169295f854f2abdd3809a3369c306e603e78a9641706fefc9947d2125d43742c7161383860f0ca61f3f91a878e3f2ca5e848ff0
SSDEEP 6144:YQ6PpOjD5gP+GGFqCl8VabJO2NRPS1AnWlnrE/HFuilU2pnd1hPWnU0f79u2tghz:6OjDmFA8uEe42lhMMw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ModiLoader Second Stage
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

168700

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_DLL

PDB paths

Name

.

Size

160KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.

Size

72KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0416c5d3a1699a45cf6651c931dc5063a1e1a00f4c3847dd7876a9c9b90ab2fa.dll

generic