General

  • Target

    ca7d12f0f62f362a2f13d842215e89bf_JaffaCakes118

  • Size

    437KB

  • MD5

    ca7d12f0f62f362a2f13d842215e89bf

  • SHA1

    b062f27d2510ca0474a948d21dfd13e67377f099

  • SHA256

    22da2a400a6f29eb10d052dee6b845a4773872b6c57f481d3f3b2c224f67bba8

  • SHA512

    b496b19424ec17b1198acb84e1b3a6e10a1785276124a33acaaba9ebf73d873f62e2a598ce9811fb04b1dcc4f9bb4981b0c1fbfdd9d8f8889f0556a850b9d3da

  • SSDEEP

    12288:9p/EFf0Mhyx1Ze0rSXSJhosDsXDP+yUbY6iXhhPEb:n/4cMMve0OX0osDyDP+QPa

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ca7d12f0f62f362a2f13d842215e89bf_JaffaCakes118
    .zip
  • Order-Specification.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections