General

  • Target

    31bbbcc430ba8d5e52e49b74343108e7_JaffaCakes118

  • Size

    191KB

  • MD5

    31bbbcc430ba8d5e52e49b74343108e7

  • SHA1

    56c1dfdd1670a5f371240e1a58ba997d857370b4

  • SHA256

    9b6d8ae660724a6a2fe7803a70fab00b8a32c4812f518935266fb5cfc4d2f7d9

  • SHA512

    8dad0570d23117a8c9293a0736c3da465d7958a93d172df11821ddad04acb909da1d3984302bdcc0d4380b5be772ef77e2d3888c76d600130135787dd4f3d3f9

  • SSDEEP

    3072:YMFlp/vSIf5ZI4AFJa34Rwvz19wmZwxV0DR+vCP6es0/PRX6bO5hbwNjFEnjusec:YMn4Ifg4V4WEmGWUVeH/ZX6QCfwVe4t3

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 31bbbcc430ba8d5e52e49b74343108e7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections