Overview

overview

10

Static

static

10

d6f3fa10a7...18.exe

windows7-x64

10

d6f3fa10a7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6f3fa10a784c9c6aa063128df3521a7_JaffaCakes118

  • Size

    192KB

  • MD5

    d6f3fa10a784c9c6aa063128df3521a7

  • SHA1

    e20dc9fbb28d741bae938007169f6b7afc8f7576

  • SHA256

    48a112715524d0656b09d796468ed7b22157c65e4178474c858c729f3d6c2a87

  • SHA512

    bac1bece0070103a07c5b47f058c8f0071cd8418980bfdc85e4833cda1f68fd37cd9579834490f88ce34f487eb9a8fea0e05ffbfb456f2bb7e3d972b2a8c7794

  • SSDEEP

    3072:8cFl8P2CR7GfcjekBBsM9hJQjWSoWYD15xigMvLS5I+Ii2VBK8oB7q/1Wo+Kv8dd:8cn8P2WGaB7LQySoW41zTeLS+Ri2VB3y

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d6f3fa10a784c9c6aa063128df3521a7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections