General

  • Target

    ef8e2ea656936ecd4b1449dfe0a43cc3_JaffaCakes118

  • Size

    332KB

  • MD5

    ef8e2ea656936ecd4b1449dfe0a43cc3

  • SHA1

    ade1a1021dc5db9a5ac77732d301365cdbe12888

  • SHA256

    7bd2dc679f621d3aa5dc41957dc4d7302d48584c4ff4857280c7bd1b1bcbfe8a

  • SHA512

    e69031d5b29b1143cfc23e4c67fdcdcf8c136fd39b5ae88241cf319a5fc7d7221b056e242c82a3020778f9eb3a335aaf1d7fcb51a5985adcae69c63f6a6b7597

  • SSDEEP

    6144:1G37JxS2Vp2CeiorXiwTBc53cpcCJJvHCeoSOXo:YrJxS2Vp6WwTvbJJvH/oS

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef8e2ea656936ecd4b1449dfe0a43cc3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections