General

  • Target

    71f5515dcae8dcca9b956943b619fb49_JaffaCakes118

  • Size

    291KB

  • MD5

    71f5515dcae8dcca9b956943b619fb49

  • SHA1

    01291f432baf9e76292478a4be4cf30840d037e7

  • SHA256

    de7367703bc06c97c2f1ad995aa4f53efd073f34b5b49fe1bc58fe1e21a857d6

  • SHA512

    54ee047e9b5d62f700d358fd87ac9263bf7fde66e81418aa6fd6c99992cae80c6b0f401d527bfebeef5644c5690b2a363a57ddd5789077bcf731ada77fa76803

  • SSDEEP

    6144:bdFkTjsSzlZiLJTzLwMVhN9AoNNLIIf6lSf3RBdQd3u3atqO4M/B4:JFkE664mhkxIfTpBdZ3ylC

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 71f5515dcae8dcca9b956943b619fb49_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections