Overview

overview

10

Static

static

10

eca56381aa...18.exe

windows7-x64

10

eca56381aa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eca56381aa675e8fce2438651bbd8ce1_JaffaCakes118

  • Size

    21KB

  • MD5

    eca56381aa675e8fce2438651bbd8ce1

  • SHA1

    228f6919d09a8ec84ab481e7cf0a4c4a56d80a9e

  • SHA256

    1236b94ef4c4b43d43ea03e5ed9e4006f56d0bcaac90bc9a6288156f06a63cd8

  • SHA512

    9b306e458e60ee4295e7def57ea877d19956482ef21668bc3e4cfa9e00d2635e62a8871b8130ac2fd5b65eef4c89161f71a15f930dbdd7031ddfc2a9c4850e42

  • SSDEEP

    384:TjXZr1pk1ssMYJpK9CglCyJKgdYU/TjR5SVqzOKlfckPepxGvEBcqtLuni:TjXZr17pgYAgl9JnYUbjDSonlUkw3DtC

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eca56381aa675e8fce2438651bbd8ce1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections