Overview

overview

10

Static

static

10

5d0838abd1...18.dll

windows7-x64

10

5d0838abd1...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d0838abd1f92dbd631968df9014422f_JaffaCakes118

  • Size

    59KB

  • MD5

    5d0838abd1f92dbd631968df9014422f

  • SHA1

    5ebe58b029940f2b0621f73f39c3f5e95490688c

  • SHA256

    b47ebd7efe76185069ad7576ceda8b7004b8f727d277f006d699fd318a5478af

  • SHA512

    0a1d14bd60559fb9b9e53976f1737a39298e62578530b6231cd1a32e07621d0dab91debc078238cf483a7470cf67fe27a2b781e28a36a6287b50fc67fd418297

  • SSDEEP

    1536:7rMPrwvhi3JcOtYkYQBQawUw1KjBQgTrrrt1:sTwZKYkvQIw1KtQgnr

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d0838abd1f92dbd631968df9014422f_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections