General

  • Target

    9754bbc74d4b6c81f83b9d3283f3ee73_JaffaCakes118

  • Size

    157KB

  • MD5

    9754bbc74d4b6c81f83b9d3283f3ee73

  • SHA1

    c670a98976f1bd893de328125b4dc0e4d908fdc4

  • SHA256

    bc3d97197adb422e0f96eca021d518f0fd74505b8f4403eb14ba2e72568c5ff2

  • SHA512

    4551ef2667fcee86175d3592f723918addacd9f0e188ba4df4c61f19b2c4704c208dbaef8cbe9cbdf9252016fb3e640e78bfde3a4ee526c1cdf43726594a7a3f

  • SSDEEP

    3072:eGbHwx3GsAFyQbXO0kwXmFRqAh+7QouCv8BATTy+zL9GwqRlcBapeEdmIMyXg:eG7u6jrkwvKaXR0cyYLF6lcBapBddQ

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9754bbc74d4b6c81f83b9d3283f3ee73_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections