General

  • Target

    8d032325d73911c1ebcf0980d6c67cfd_JaffaCakes118

  • Size

    865KB

  • MD5

    8d032325d73911c1ebcf0980d6c67cfd

  • SHA1

    fdad44789a83285a9b5dd04865d7d4dc15df5cc3

  • SHA256

    3fb92252750fc595f7dfaaf31283c9363269b79ba9d121c8b8fa9ddc0aad295f

  • SHA512

    4e9e9ee13192cafe982b83ab4ce3b7d2702f97f228c664b2fe0f8d679d2e451377371bad55dc2b81e9cf1ca78042fd3055551ae741eb6c6b6dd06bb62a6128a2

  • SSDEEP

    12288:+35+3F0ZmNf3h1HEoBZmSiJyO50xJ0BBIZR+qVU7s6+oW+PKnFc3SrTh2VPUYWVC:g5kk2R3BI9vX8z6+V+CnFpwpWm3l

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d032325d73911c1ebcf0980d6c67cfd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections