General

  • Target

    e4b102894dbb34062ec1e9c0a2a48c87_JaffaCakes118

  • Size

    328KB

  • MD5

    e4b102894dbb34062ec1e9c0a2a48c87

  • SHA1

    e8242934ac4091e1a23eb014f05d09fc66646ac6

  • SHA256

    98c95e28b1389a6532cfd67ae68c1d07343db2b66c50baa3fc1a445e4049dea0

  • SHA512

    4ef8367b303d9b5b7e3aa045a59559e5f7e26071a38e436ebfd02a98db883eda5e124f51fc57d23efc8a5ec3caede601b46bee3fba59eef3439e68ed5910a98f

  • SSDEEP

    6144:yGyjnBSkuV1d4eZd88ORJIf/wTBF53CpcfG7oS:hYnBSkuVUeZdYqwTkl7oS

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e4b102894dbb34062ec1e9c0a2a48c87_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections