General

  • Target

    4db61ea2ef2437a98a83a958f3eafc3b_JaffaCakes118

  • Size

    14KB

  • MD5

    4db61ea2ef2437a98a83a958f3eafc3b

  • SHA1

    6e48e7b67d156fabd14095cf0e11ebb4f2f0f722

  • SHA256

    edb1d528346216e301bdea85f83f3f61549dd49671a2f51691ac17be2bbc7a98

  • SHA512

    1639750c063b0f2599d09841d46aaf23d25b0be69ae5ea3d72006d5f42e926864947e6fb4ec2408b0dda653d0178f1c3cc1e2e296b33f7dff012ab160974d389

  • SSDEEP

    384:Civr/NuTNM7RLSENIsUF/tjzNOBZsVhr8mPx:zzETuBSqBUDCZCS

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4db61ea2ef2437a98a83a958f3eafc3b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections