Overview

overview

10

Static

static

10

06a9b19266...18.exe

windows7-x64

10

06a9b19266...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    06a9b192663ca17de8dfec9320f05a81_JaffaCakes118

  • Size

    24KB

  • MD5

    06a9b192663ca17de8dfec9320f05a81

  • SHA1

    2b1e5bb5101b8a94f592be851132394d1423d130

  • SHA256

    eb53c19091ec5702fbf40edffda57f06bdf92625b80fd345fc426eb78c7ea225

  • SHA512

    e26d62b42e22c7a82e1f878f6da3fdd87256fe22475792bc7fe5647bb10f7c1f82c1e4c007f17c3e61de67db16264620c0117570f9a2ace8b19416698eec721f

  • SSDEEP

    384:VjOAmQcn2W+WYFaQ1DbiRZLeFs5A/UcVYIB9buZVboOJku5x7:VjOxR+PsQlUZLey5UU8Of3Jz

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 06a9b192663ca17de8dfec9320f05a81_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections