General

  • Target

    838ce866b55bb2926e233d6b362fa4b2addcdeaaddf87ce0811f0501e3384a5c.exe

  • Size

    18KB

  • MD5

    d0e834aed727fe49a51b071c680a282c

  • SHA1

    61b060f3ac975b2c13b6b396e61f49a8ae6da45c

  • SHA256

    838ce866b55bb2926e233d6b362fa4b2addcdeaaddf87ce0811f0501e3384a5c

  • SHA512

    6a8a34ad293160111d2998cbb551afbe867065bb66c293ca48368ed3d8750a165d9978b6c5a30bbb18711c23bda8dc7ab81ca13aae1317b991b816917398e45e

  • SSDEEP

    384:0Ew7wknHOYXQdhLGPvCaV4pLS7OGQ8xy1CzcN6Rne:0Ew7wkHOYEGPvCaV4pLzb1fN

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 838ce866b55bb2926e233d6b362fa4b2addcdeaaddf87ce0811f0501e3384a5c.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections