modiloader | fff4502b326d8960c93ca61ff1f8e703_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fff4502b326d8960c93ca61ff1f8e703_JaffaCakes118
Size

1001KB
MD5

fff4502b326d8960c93ca61ff1f8e703
SHA1

24fbb650fed180c969842f797f6a96036738a015
SHA256

9d5ee372aa5265b5cad2ce8febc62b6a58aea1b4d9915ff46135eec39f35682f
SHA512

97f5f7a177eca3dd62080fa7c69f36bf59870e270ca3923923de55d9690ad77d8c4d15b0f91e7c6b5adbbda52bd5a081bbb9ff410f1470a324de9282568029e4
SSDEEP

12288:3EFkgpTTtDXlsz79Jb0shkBrVA3Tyh2E5OHnpc9hDAlTwHK:cbVDXlI7IshIrCbU6puDAlT7

Score

10^/10

modiloader

Malware Config

Signatures

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fff4502b326d8960c93ca61ff1f8e703_JaffaCakes118

Files

fff4502b326d8960c93ca61ff1f8e703_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

1
Size: 612KB - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

:
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

;
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

=
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

?
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

A
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

C
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

D
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

E
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

F
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

G
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

H
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

I
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

J
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

K
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

L
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

M
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

1 Size: 612KB - Virtual size: 616KB

2 Size: 36KB - Virtual size: 36KB

3 Size: - Virtual size: 12KB

4 Size: 3KB - Virtual size: 12KB

5 Size: - Virtual size: 4KB

6 Size: 512B - Virtual size: 4KB

7 Size: - Virtual size: 40KB

8 Size: 30KB - Virtual size: 32KB

9 Size: 512B - Virtual size: 4KB

: Size: 512B - Virtual size: 12KB

; Size: 512B - Virtual size: 12KB

< Size: 512B - Virtual size: 12KB

= Size: 512B - Virtual size: 12KB

> Size: 512B - Virtual size: 12KB

? Size: 512B - Virtual size: 12KB

@ Size: 512B - Virtual size: 12KB

A Size: 512B - Virtual size: 12KB

B Size: 512B - Virtual size: 12KB

C Size: 512B - Virtual size: 12KB

D Size: 512B - Virtual size: 12KB

E Size: 512B - Virtual size: 12KB

F Size: 512B - Virtual size: 12KB

G Size: 512B - Virtual size: 12KB

H Size: 512B - Virtual size: 12KB

I Size: 512B - Virtual size: 12KB

J Size: 512B - Virtual size: 12KB

K Size: 512B - Virtual size: 12KB

L Size: 512B - Virtual size: 12KB

M Size: 9KB - Virtual size: 12KB

1
Size: 612KB - Virtual size: 616KB

2
Size: 36KB - Virtual size: 36KB

3
Size: - Virtual size: 12KB

4
Size: 3KB - Virtual size: 12KB

5
Size: - Virtual size: 4KB

6
Size: 512B - Virtual size: 4KB

7
Size: - Virtual size: 40KB

8
Size: 30KB - Virtual size: 32KB

9
Size: 512B - Virtual size: 4KB

:
Size: 512B - Virtual size: 12KB

;
Size: 512B - Virtual size: 12KB

<
Size: 512B - Virtual size: 12KB

=
Size: 512B - Virtual size: 12KB

>
Size: 512B - Virtual size: 12KB

?
Size: 512B - Virtual size: 12KB

@
Size: 512B - Virtual size: 12KB

A
Size: 512B - Virtual size: 12KB

B
Size: 512B - Virtual size: 12KB

C
Size: 512B - Virtual size: 12KB

D
Size: 512B - Virtual size: 12KB

E
Size: 512B - Virtual size: 12KB

F
Size: 512B - Virtual size: 12KB

G
Size: 512B - Virtual size: 12KB

H
Size: 512B - Virtual size: 12KB

I
Size: 512B - Virtual size: 12KB

J
Size: 512B - Virtual size: 12KB

K
Size: 512B - Virtual size: 12KB

L
Size: 512B - Virtual size: 12KB

M
Size: 9KB - Virtual size: 12KB