General

  • Target

    96a18ce787ac07af50fbc05f958b2409_JaffaCakes118

  • Size

    80KB

  • MD5

    96a18ce787ac07af50fbc05f958b2409

  • SHA1

    f4aff654ac44f6b8f0f469698c3902d3d825d6f7

  • SHA256

    ba3744eed74442acd4033ab83f9adf818121d3f031a60c01bd1f91a8737601d6

  • SHA512

    ba61f9e470542ab9f45203acf32eb12a8fee2eb5633e064657e41b00946cd8230bd58372b55393fda71878af92fe1f8185f4743f59fefc9aeeb40019189cefc1

  • SSDEEP

    1536:mVXlamldtqrkZn6umUtDoXSMd7FrcrVpe9y5Prom+m3BLgsp949PArW3:mVXlaadtqG6LLXzFrn9yFrLLgE2PArW3

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 96a18ce787ac07af50fbc05f958b2409_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections