General

  • Target

    bfe4c6fa07b42d1da612f2c3972ffffc_JaffaCakes118

  • Size

    246KB

  • MD5

    bfe4c6fa07b42d1da612f2c3972ffffc

  • SHA1

    0bfd448a54021b79e1643a226c0331ada3848ace

  • SHA256

    fb2c176dfe2daa1f0b783cc2d740e08d0a7008b976f396bb20c609daa71131e2

  • SHA512

    4b007cd4c7e6276c80263f3c9cd74f2a4910ee4b389df251458ad5a82b8d3ce9d47bc9899ee132b9aebab197c3f33c064fa6cb4b813e192097783d04aa57d6a4

  • SSDEEP

    6144:viyyJUUvF2Co6b6LLFL+yKtWtn0SYI0D1c1iS7qK1:vniUA2CoLPZ6tSj11n7Z

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bfe4c6fa07b42d1da612f2c3972ffffc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections