General

  • Target

    ce7127eb2c185d458e5921436e13eb19_JaffaCakes118

  • Size

    90KB

  • MD5

    ce7127eb2c185d458e5921436e13eb19

  • SHA1

    f6b1259c9b8185e7976f5055c9ec95751a43218a

  • SHA256

    a50c3dcef17ea3ffd0b26261db537a74ae1c2bd99ed566ab7b4e8fbba75b69fc

  • SHA512

    7084b8f31c876222eb98fdde2d718ca1e95e3bc02e0a6f3c4291323bd4326fa7f3663534828c2f0ec86e8cb7d32120ac006370144ee1923ffc11dd3c119aeba0

  • SSDEEP

    1536:mcHA5dZuvrKA1r4Jwwi55dlvo89UBYKpJ0pHWG7m9pAsiyROtLLg4rJjxc6mQ:mcg7UrKqUwflAZYKX6aAsiyctLUeJj/

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ce7127eb2c185d458e5921436e13eb19_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections