General

  • Target

    dee273e6893f567c1fc6544da0b06108_JaffaCakes118

  • Size

    35KB

  • MD5

    dee273e6893f567c1fc6544da0b06108

  • SHA1

    2962afa143f3f9f097d102251077e7b3d04a8a95

  • SHA256

    0e2113eef5c96365a282184f82823992748ab4b669ef1cb2ce82abf8c277e200

  • SHA512

    cc5990e1a22a3793bfc790aee19ab19e1bfd28c6ccddb1dbf55c4fb3a751813bb73cdba638e7d63af3fc72d556bb696d6d3458b2d5e1a3356180492583538181

  • SSDEEP

    768:fh+olJJ0KU4ITQmH7VIAC+wCRSwHRfoqNiZhQCoEry2m1qSI:xJ0qIsCOAVD4sRAqShbU1I

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dee273e6893f567c1fc6544da0b06108_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections