Overview

overview

10

Static

static

10

ba8fd20398...18.exe

windows7-x64

10

ba8fd20398...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ba8fd20398178cb5acbde54b6314c55e_JaffaCakes118

  • Size

    760KB

  • MD5

    ba8fd20398178cb5acbde54b6314c55e

  • SHA1

    535f80827d0becb7b59927f7ad97025d4c4c8693

  • SHA256

    87c2f0f8b72e07d3a1bb7a1b72dbbbee83fd87aab39ebcb9c60dab32faa468e2

  • SHA512

    022931df009b538d372c0868f1b123b499c3bfb30cfcbee44d64cf5feb2e8f326939c68fd2c465ce763be9099cdfc7ac7771277bcb6bdf71045b8f85329daf49

  • SSDEEP

    12288:reCu1r9XCxQ0BaTCuMD6odn2NELPAYbKnH78msZQWgnzyXK+Kjg8jjxprn5Vd9d:qLScw6Sn2NExenb8mGQWyzyXapL5TL

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ba8fd20398178cb5acbde54b6314c55e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections