General

  • Target

    a247433b852fc724bd9d3bd499573ecb_JaffaCakes118

  • Size

    296KB

  • MD5

    a247433b852fc724bd9d3bd499573ecb

  • SHA1

    3babac5f556a312279bc7697653e0558e93cee4f

  • SHA256

    bb24275056abd3a7e738e865b87f8cb80ea8bfb1f30d8e83e652ee32690e62a6

  • SHA512

    65e66ec2e658c0f2971014cf629064d686004ef6d3c259f8ee43d914d57f66ad6ac95f5925b5a31dc2bce9a64f4c29c378285ec3360a6d41cdf9cf20285aca1c

  • SSDEEP

    6144:qsWHEATb575CdmKDrVSJRNMoTudTG/9ocXXZFl3sywMnXqJkRi1TMXIp/0:q1kAx74mKDxSJRrTuNG/9o2Zc/cqJ147

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a247433b852fc724bd9d3bd499573ecb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections