General

  • Target

    bb423727f393a39b086c8a99e5e95504_JaffaCakes118

  • Size

    334KB

  • MD5

    bb423727f393a39b086c8a99e5e95504

  • SHA1

    ddee7275aa212101222d2e5ec003ab46304f9078

  • SHA256

    3e736d990e747ddc604de0920be02b4a3ae1f73a4d6ebff163fd0caabe02c1eb

  • SHA512

    6bf77ce3094e01b0639ad27133385c9b62a1d05d86ed962ae5b294193154300841f2d1773a5d08c580bb43bf4f505b01e18888e40a11e7ee224de772b6a61f41

  • SSDEEP

    6144:Z4KbG08oU3A+ZkGL0y6rACSqfe7vQuxveON/AkYdFkEUBxNoYy2oJNgLsfH:ZLn8V3EGAJi/1xme/AdFaBxO0obgUH

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bb423727f393a39b086c8a99e5e95504_JaffaCakes118
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections