Overview

overview

10

Static

static

10

9ff479b77c...18.exe

windows7-x64

10

9ff479b77c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9ff479b77c084e247f9e4e7d8bd590c2_JaffaCakes118

  • Size

    296KB

  • MD5

    9ff479b77c084e247f9e4e7d8bd590c2

  • SHA1

    1dba915b43d2dc5b444095266379a2de26de1829

  • SHA256

    849b1b958c50f02ca3dff8f9267da3ba2d5996292c58b481787b9582915b0b8e

  • SHA512

    c22f9f3696cc61bc863d3e016748392d0da8d203c41788c1912ef71880c621afd7609fdf6526092b224339b07b8ef5771979612a4c04efaa065bb46c51579cc4

  • SSDEEP

    6144:KqUrmuMXbzaK0ZXWGluvGpRNFvCCuiMrK51cwnXLjLrg2OAZJ9ek0:PrHaKQXWGcGfNDt7nWAc

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ff479b77c084e247f9e4e7d8bd590c2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections