General

  • Target

    30ee1bb910f5e4e6c7f7ef6a0eb8a0b1_JaffaCakes118

  • Size

    146KB

  • MD5

    30ee1bb910f5e4e6c7f7ef6a0eb8a0b1

  • SHA1

    37b945889b767c4354d018b9cde5f6e4d3773d8a

  • SHA256

    cadb83ccb20034ab2a6ddf002847f7ca683d29b3bf1379bf153edd4a71e693b4

  • SHA512

    004286d325e0ff6044c2b48085fbd76fbbcc5f1b507c46ec152de8232d81560cb00ecd15b2baa4b6dea1f172b19bee794fd2d945045262689decee7273009a24

  • SSDEEP

    3072:VbpY9MaNrZzxb/+T2cVVOt+k6xxxad/IdA:7iMad/+0r

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 2 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 30ee1bb910f5e4e6c7f7ef6a0eb8a0b1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections