General

  • Target

    f745b702c55eda199041f64d4ac0db3e_JaffaCakes118

  • Size

    192KB

  • MD5

    f745b702c55eda199041f64d4ac0db3e

  • SHA1

    5c83b7bb546fd97d585e8df64743eb3e1b332eca

  • SHA256

    fdf64454515560e5d69db226ca90bcaf1507a24750a2350b3e51cdd6b96b7bc2

  • SHA512

    a21e6a474e955364ea0ea74c268318f4b74f7637998a8964d206246cff605603fd2406c3c65662735315f0ee75e10e693f83d5011845f5c433445a308d3a5861

  • SSDEEP

    3072:qcFl8P2CR7CfojekBBsM9hJQjiSoWYD15xigMvLS5I+1jgWTIGJrElaPZYa58E3g:qcn8P2WC+B7LQGSoW41zTeLS+mjgWT5T

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f745b702c55eda199041f64d4ac0db3e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections