General

  • Target

    b139c5b8ef17581b288632b9e2a7fd38_JaffaCakes118

  • Size

    1.2MB

  • MD5

    b139c5b8ef17581b288632b9e2a7fd38

  • SHA1

    6d40422a00dd58985210703b400fea7d20bc8b23

  • SHA256

    dfcf59ba43a99060883cc50dc43ab31da6dbbf8fce00c6b076b51bdc48e70e58

  • SHA512

    bbde69d6dea7480d61238c6b58c01eefdc396f2b0fed82537b1692bb24fd2b859a5e2608895c31b58bf099bab77141418c9af1dfca9332e4595e157468bfe523

  • SSDEEP

    12288:6YnBSkuVUeZdYqwTo1wzoSip4RYOgxhvp4RYOgxhx0Nx:vSkuiqwToYSOEheSOEhxO

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b139c5b8ef17581b288632b9e2a7fd38_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections