Overview

overview

10

Static

static

10

5abab078b4...18.dll

windows7-x64

10

5abab078b4...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5abab078b4e71ab951aff47fc2a2d92c_JaffaCakes118

  • Size

    115KB

  • MD5

    5abab078b4e71ab951aff47fc2a2d92c

  • SHA1

    252b98dcf3831031a8ba46686d9eac23782dc94f

  • SHA256

    4daea3d6e1fd85c2cbfc5b16faf33c77c9f1e354f09dab545115355c77f6baf0

  • SHA512

    5f88bcb95d076ec21da29c9171b381ef5d2d42881d5d6b3c65e310e234cd85dcdd2808f8173150ff0431c7f3209113e38852e80df97be1d2e43853484aa32b58

  • SSDEEP

    3072:AhPvRhz2zgHi66GW6fhZGMaM1lirBHVOr:A15AEzRW67G0T

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5abab078b4e71ab951aff47fc2a2d92c_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections