General

  • Target

    a019acf6ed8e7493eb3daa1f5add9ef3_JaffaCakes118

  • Size

    130KB

  • MD5

    a019acf6ed8e7493eb3daa1f5add9ef3

  • SHA1

    e3a40c5f997b613530e7b09a768e38e1a2dbff1c

  • SHA256

    cb14b551a1da266536319e9ab1918985340ea7f6a08e486bb2b25c19b9c5fab5

  • SHA512

    0a2323f0a0e18de247f2841f333884b7a705b0f051607b8541ddc6d739e942cb1e992c7e9659543601f46255f27181c04e668c2b4ed66ce357e5411b5942f0fe

  • SSDEEP

    3072:eZf4+cO14BeqT/X7TXofFvw0ENh1kNvxNw:eZf4+cO14BeqbvXsFvwXhiQ

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a019acf6ed8e7493eb3daa1f5add9ef3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections