General

  • Target

    2b0c17de8f1cc0bab88c873ad2ae5161_JaffaCakes118

  • Size

    517KB

  • MD5

    2b0c17de8f1cc0bab88c873ad2ae5161

  • SHA1

    2b7a904c9417843094b805c5e493c1158760c942

  • SHA256

    1d017b2c68b42011171f86a97b1bd20dd46a35b71a5fcea3c6b3fe33709430d9

  • SHA512

    c12f42efee0b56d60ea6d885039d4dc5a31670bd79fac66846e40c4612f402180622ef607e32be4668cc215162900f9a9fa98a0282fb20ca3813019645b94acd

  • SSDEEP

    6144:+1ITdBNJh0FPp8KVxSzwR0sYj/cf0rfBYBDkKZWGZFb5P1WrPGV0A:BTdFh0tFxAwRc/cfOfBYGKEGbb5m+x

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b0c17de8f1cc0bab88c873ad2ae5161_JaffaCakes118
    .exe windows:1 windows x86 arch:x86

    cf7bcaca6163794dcfc99a8990613c45


    Headers

    Imports

    Sections