Behavioral task
behavioral1
Sample
53f4e080c306971a2dba4ac56e0623f8487185493af58800915b3dfed1d25a09.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
53f4e080c306971a2dba4ac56e0623f8487185493af58800915b3dfed1d25a09.dll
Resource
win10v2004-20240802-en
General
-
Target
53f4e080c306971a2dba4ac56e0623f8487185493af58800915b3dfed1d25a09.dll
-
Size
511KB
-
MD5
5dea4529bb0e6fe060a6f730b1933c79
-
SHA1
929c0770ee78bc951c797697509a234d43c1bb51
-
SHA256
53f4e080c306971a2dba4ac56e0623f8487185493af58800915b3dfed1d25a09
-
SHA512
219a18b36022571e1df21e3540df229d1ce5ccf8c805f361877b9dc8723e1a752245b34999b0ecdbed0843c64c02fa4b6cb6fa7a5705867cb95409179caf82de
-
SSDEEP
6144:6C0puilcyi5VoGOu2GfvgkGvSEi6Z/0+Jie6nvv0vibgjUj1u2lg9UaoZlYkicsf:8uilTC3Of9n3idKibYic2lhMpWi
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53f4e080c306971a2dba4ac56e0623f8487185493af58800915b3dfed1d25a09.dll
Files
-
53f4e080c306971a2dba4ac56e0623f8487185493af58800915b3dfed1d25a09.dll.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
Sections
. Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ