General

  • Target

    44d42ece30e2d7afe9d31ef7947a2615d035070da1e01929121d354ed6607a8d_dump2.exe

  • Size

    18KB

  • MD5

    e324859921e79c2debade0ff4e810729

  • SHA1

    152dc13b8192f3d3b0f8b425f9ad151d8aab7013

  • SHA256

    3e4a28152dc83e033231aed01fb248b92115da2084fd41e48a0bf93db10eb5e3

  • SHA512

    4f95ed7891e06303d9d5b6aacf45e445917685385f8efc50e47fa91b44872647852d1c840c1cc0270636ffa7e6d7de088335980016e4b15ed02bdfa82792e2d6

  • SSDEEP

    384:AEw7wknHOYXQdhLGPvCaV4pLW7OGQ8xy7MiPWxIShne:AEw7wkHOYEGPvCaV4pLfb7MiWxI

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 44d42ece30e2d7afe9d31ef7947a2615d035070da1e01929121d354ed6607a8d_dump2.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections