Overview

overview

10

Static

static

10

295febe8fa...18.exe

windows7-x64

10

295febe8fa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    295febe8fa55c2106020f4e7f1fc8d20_JaffaCakes118

  • Size

    157KB

  • MD5

    295febe8fa55c2106020f4e7f1fc8d20

  • SHA1

    e3aaf42cc365989a6ecc2f8d08064b0fe12a82b6

  • SHA256

    bc5b13d9eda0d06f27358bbdd081fce3aabb4b0e939efe7c455499d8f7964a7b

  • SHA512

    1f3e3eff402bbbd9942241171fa78c64817766f8803dac885e9d12d50b3297ae7d5783c398b030d95ec5373e975d789cded1d3d4ece6d8db2eada890bb2c5193

  • SSDEEP

    3072:2GbHwx3GsAFyQbXO0kwXmFRqAh+7QouCv8BATTy+zL9GwqRlcBapeEdmIMyXaC:2G7u6jrkwvKaXR0cyYLF6lcBapBddq

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 295febe8fa55c2106020f4e7f1fc8d20_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections