General

  • Target

    f051ef7670d60fe0b472f5c505c42ff9_JaffaCakes118

  • Size

    317KB

  • MD5

    f051ef7670d60fe0b472f5c505c42ff9

  • SHA1

    9e789c40094cbbcb491062ad3cfbb03d356d0ccb

  • SHA256

    eb20b605b84513cdb618538beb1f2f572ec7e01e63d6ee4966fdc486b8b82d81

  • SHA512

    9cfc02de337af30c8fa75333eef3682336f076e6d49312f98bfe2957a0ea9e25d20c8ab54047b9cb878e98b19715a298a0e9db73fbf1eb945a4d204ecab6b063

  • SSDEEP

    6144:3G377xS2Vp2CeiorXhwTBF53lGzOjpcCJJvHCKpoS:2r7xS2Vp6FwTPZjbJJvHdpoS

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f051ef7670d60fe0b472f5c505c42ff9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections