General

  • Target

    5e142f53beb47aedc970538f4c50c8f4_JaffaCakes118

  • Size

    303KB

  • MD5

    5e142f53beb47aedc970538f4c50c8f4

  • SHA1

    ce795f510e98316d091027a8c2645e405208114f

  • SHA256

    606d308779daf96b7caa1e05ad8b98df552e452e66efd2bd3e6e9f63d99f7d79

  • SHA512

    c615d19dd80de002921a873108270e4c1f20b5274da3fc5bc3367becd6f358dfa9ee4320035a31675f172c173f800f013ca2992e2fad4cbf4d1cacfa90e2edcb

  • SSDEEP

    6144:KRCoaXzr3RREp3fr+oqDILvTAvqmaEIkPsa9tkVBx4hy8g/Fuau8c:Nff3XEp3D7xLvTlmmkPsa4VT4ad0P

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e142f53beb47aedc970538f4c50c8f4_JaffaCakes118
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections