General

  • Target

    013dcfea0eff15673ebb1fb3eed7adbc_JaffaCakes118

  • Size

    157KB

  • MD5

    013dcfea0eff15673ebb1fb3eed7adbc

  • SHA1

    c9f3eae70d640888b87c56000fa347060967e8c3

  • SHA256

    d708cc8a23586dfc31bb2563484f7068fdf58955611b6f1e40de93112eb4637f

  • SHA512

    bbdd84afee83ac808392a8a6ede5167cc4481d9a1cc5ebbd2660bd251b93b8edc56277fc63bfc732b4e6d0700ec48ebb8013dedbebfbdeaf292f93f3114171de

  • SSDEEP

    3072:DGbHwx3GsAFyQbXO0kwXmFRqAh+7QouCv8BATTy+zL9GwqRlcBapeEdmIMyXFD:DG7u6jrkwvKaXR0cyYLF6lcBapBdd1D

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 013dcfea0eff15673ebb1fb3eed7adbc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections