General

  • Target

    7633d23ac35ae6bc74560f1685b7d6e4_JaffaCakes118

  • Size

    296KB

  • MD5

    7633d23ac35ae6bc74560f1685b7d6e4

  • SHA1

    9b520a0df183f542f751b45a6cb5c2bd2407e86a

  • SHA256

    92f316c0d4c99d4031d713797dfb52c42364d4fcd29dfb6874ca0aa8526ce6a5

  • SHA512

    26dcaf7a1895e02998eb2c0cc312241bc9e15a87d1bb1d45c1b454e4ec40e8aa80f07e413dc585896127aeb6e46475b3b5dd2489b9e7b3bdb2c66eea98f3f142

  • SSDEEP

    6144:ksWXEYOd9nWwfNEfKLZXhoPSgc+I8jz1a7PXNR5FEawmm/dZQoikfWoPXIA0:k17YpvNYK5huNU8jzYjN7V3avQafWUY

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7633d23ac35ae6bc74560f1685b7d6e4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections