Overview

overview

10

Static

static

10

49f54f8a7e...18.exe

windows7-x64

10

49f54f8a7e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    49f54f8a7ec2e767c12ec87de0a9e8af_JaffaCakes118

  • Size

    190KB

  • MD5

    49f54f8a7ec2e767c12ec87de0a9e8af

  • SHA1

    fe7e6542dbdf71de401af9bbd9983cca1a5b244a

  • SHA256

    210c7e0a05257731a68a015b22f75498f8e6571a6d1f29fc17521b5533f78180

  • SHA512

    fbbf5fbf6a662d6204d6cd4a8e39f7ca3e0f254bb4ab5f6db8e448911150329589f27427189bd8149d77bb7a16ced87760e72e4955f33f854e00b45fc4b4d3f0

  • SSDEEP

    3072:IMFl8PE2VtkxjOMHxCI5VPIkfV78pITVAOPt7pYoGm3XUtYguUBwhO77S/DEhP6r:IMn8PEkkJDCUnKITFPHbA3OAS/D26xhj

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 49f54f8a7ec2e767c12ec87de0a9e8af_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections