General

  • Target

    8ca028d6a26153dfdcb0f67b66159ac9_JaffaCakes118

  • Size

    295KB

  • MD5

    8ca028d6a26153dfdcb0f67b66159ac9

  • SHA1

    5362f1c2d6d3935fa505f4b1a57987abccd1cd3d

  • SHA256

    be31185fc80afb305d668d523e70858d26f78ccf1175da83cc465eb949f8523a

  • SHA512

    2d73cb95b92a25da8c15cabe5833129a077b6fed804d54616c1880b5a319058725208768ccafa7f2efe68f8bf99a53269089cb0b58079b98b79b0438b331475b

  • SSDEEP

    6144:1RyIL4ImePaoQjVEc8FAkT7sRd54tFNX9xZRi5c1a15lajT0:1vLqePaoFcxkMUFNX9rsea1/x

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ca028d6a26153dfdcb0f67b66159ac9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections