Overview

overview

10

Static

static

10

b61e19038c...18.dll

windows7-x64

10

b61e19038c...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b61e19038ce503d3ae528f6845afb3e4_JaffaCakes118

  • Size

    147KB

  • MD5

    b61e19038ce503d3ae528f6845afb3e4

  • SHA1

    0f81e38b821887fd3f05ce62d05282b77a522a53

  • SHA256

    fcd36561260af81aa9c93dc8632dda224fdde6a8ebc3648fd9926283f8c5e2c5

  • SHA512

    dffa6e0be74c5077b278c42a86cb5717ba573c7baa30e327a2d92e4cde9f437838a940a45a46bf2e7197dcbe246a8c30868f65dd9a2ed36b2c48bdb2364bf965

  • SSDEEP

    3072:6mvG9swA4bcAeDofRDbkeOQBqFOk5EIDXiArs8+Jm4rQ8oRM53l:6svNbAdB+Oklv3af

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b61e19038ce503d3ae528f6845afb3e4_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections