General

  • Target

    67b277fac166d646ac12691f477819c8_JaffaCakes118

  • Size

    150KB

  • MD5

    67b277fac166d646ac12691f477819c8

  • SHA1

    387701ebdf49a9aa0b637a3ad22341debac2c495

  • SHA256

    63a829617acc5eb8ecadfa6e8c0e8d2d7cd0a920bfa5dddc8fdfc9d8277c226b

  • SHA512

    f87d5cdb104d829ee589abac7ea4c3cf78da4b487c73451c8061c09a31b7976777cf1c0fdae8b9d4986b108e13b43e20e05b464e1e80e8e6493b8fd07ae54dee

  • SSDEEP

    3072:6qJWxxCi90Q9S73RdfNQMkZGUi/fs/mpr58Ge/2nbjnOm:6qnin9QRsMkEUi/fs/mp48jO

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 67b277fac166d646ac12691f477819c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections