General

  • Target

    01147bc0e7ff8964624cf5b2cafb01eb_JaffaCakes118

  • Size

    289KB

  • MD5

    01147bc0e7ff8964624cf5b2cafb01eb

  • SHA1

    6b8e653627e93f2097254aeaf2120c133a4d2d53

  • SHA256

    4b587df8a535337a717ad61923235ab2ceb9e8917b07bab955a9741ab2db07ce

  • SHA512

    f8fb382d95d0af13bb39e4e0d3afd76dd558643bca7d3aef56effe14b10393503dc53b6914e2b2d3ecd40855e7e524f09c4cdc4b80637ff711251127a7495bdd

  • SSDEEP

    6144:IKNnTwABk3ZFno+T5OhN42eqaEemOIMMdlSJy5jS6uolNHbOq0:BT5W33VQN4lL4MMdls+kolN7k

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01147bc0e7ff8964624cf5b2cafb01eb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections