General

  • Target

    014f7367f06303e1ffcf105f0abf1282_JaffaCakes118

  • Size

    166KB

  • MD5

    014f7367f06303e1ffcf105f0abf1282

  • SHA1

    974901fac7f09dddf4d8b184452c3890d5e28b16

  • SHA256

    edda8d66d78d1325da4fe89da00a543b1096873e389ecbcc88c54e848135c792

  • SHA512

    0c1c94fe5f2afd5196ff01c5eb696436054d3da23a870a4ee4d3eee53916733ea4783d3441ece2429c24439aacbef3e651a5416d685d8f45ce1be413e8a90f18

  • SSDEEP

    3072:CqA7FfFga9LoqMoiLPb8cvgEFcREgiQR0DTjO0EB0aOHCoHRBlJ:M7FZLoqxkPbjIZ6gwXjO0EBsCoHRvJ

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 014f7367f06303e1ffcf105f0abf1282_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections