Overview

overview

10

Static

static

10

6463920d2b...18.exe

windows7-x64

10

6463920d2b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6463920d2b96719d3ef030cf484f4c0e_JaffaCakes118

  • Size

    400KB

  • MD5

    6463920d2b96719d3ef030cf484f4c0e

  • SHA1

    59dcfc73745b84ce07a7ac037c47179b983da8b9

  • SHA256

    e6b6c2ba6f9dc6de54032b2c1e9f50b11085ad014734f72671711457299ee9b1

  • SHA512

    3fb2a8dbf43acd384e1b7fde0c3b61e68c2738a249ff4279101362ca506a66b861baa3ed98e54221aa0efe19ba84858047c5896af6ae49d1527e44d311a2118d

  • SSDEEP

    12288:YItkoQShjRTVMlGpTnBpsaWw6Ggr8flgNUKHAPQev:YIt1hjR1rJWwpC8flgnA/

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6463920d2b96719d3ef030cf484f4c0e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections