Overview

overview

10

Static

static

10

f094a3b022...18.exe

windows7-x64

10

f094a3b022...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f094a3b0221453cb41535ce4912377c8_JaffaCakes118

  • Size

    413KB

  • MD5

    f094a3b0221453cb41535ce4912377c8

  • SHA1

    cd2eaf02d63695379d775fef3f3e80e14a6ffdc6

  • SHA256

    23ee628201a6572eef21e88cd3a6b99b016b6b10e61f55c9eb57928f7dde9e14

  • SHA512

    111c25f2b72657f7e38fc28dababb8d275ff169e8a59d68981a64e2f0c3198250b1deaf3dc6e5b6e053debe5d4606639b54560d471012e0af863301d6a0ac503

  • SSDEEP

    6144:e8t57QciskQbmfX0P9rdhdurPHP2OuptvAbfg/RLMmIy8x9qLtsXtdbeDziZlJ8O:vzkfI4ebPk4/Zz8xELtsveDz2lJF4k

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f094a3b0221453cb41535ce4912377c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections