General

  • Target

    d4449a3f8d728c2a1b324035925bfcf706cc5aacc5e16aca2816c9fcd1f16849

  • Size

    2.9MB

  • MD5

    e0bf919ec54d4c3d14e384969cc230b0

  • SHA1

    b38b411cc76948baa0234c1f670dbf876e1d5e51

  • SHA256

    d4449a3f8d728c2a1b324035925bfcf706cc5aacc5e16aca2816c9fcd1f16849

  • SHA512

    4a6eb259f146e4d006b54649c561aae80b5fe30c4b9fe0d0d3e2d00ef6233c948c94c1a10fa38a08d32c3faf9f08175e5e9c8a8dc58d50438b8817ff47ac7fe4

  • SSDEEP

    49152:NDU+fe9YRGjsNwd9isQ6bYYE7ORL4HrOVPisXIa77TO7cBX3FymLrzp6vcP69fhy:Ng+feuvwDiN6bYYE7iLKyJiaIaXuct35

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d4449a3f8d728c2a1b324035925bfcf706cc5aacc5e16aca2816c9fcd1f16849
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections