Overview

overview

10

Static

static

10

e08a3bc832...18.exe

windows7-x64

10

e08a3bc832...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e08a3bc832b0f2a89cf1f00b23636678_JaffaCakes118

  • Size

    338KB

  • MD5

    e08a3bc832b0f2a89cf1f00b23636678

  • SHA1

    631247b0b981052e20f50ae4e952efb4fdd827ed

  • SHA256

    e0b64d43f4a41958ac6f611445b988266d376f7564cd25bd250627fdebdd7e18

  • SHA512

    3ba5e609fb9eeb9191fa3ac1d18cf550c40f5a83339cf63c8475cee21a1faecd709368529c6c7158d5599a78fcf4c88e845353305170aadf5d1b576c91e3e123

  • SSDEEP

    6144:8z72/7nN4BhdMnvIgQUBuKgtX2Sy0GHY327OW+/lXGsg0:8z72GhMnAgQUM2S6Hy27g/RVv

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e08a3bc832b0f2a89cf1f00b23636678_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections