General

  • Target

    024745a24560700e48a396676e4d29f2_JaffaCakes118

  • Size

    146KB

  • MD5

    024745a24560700e48a396676e4d29f2

  • SHA1

    947ab3950f2069648800835e9d88bd95b54c713f

  • SHA256

    f4b52b955ab4574f08d7fdbcca8a08dfdad62bdf5fc993c8db442bdb0198191d

  • SHA512

    4c695549502314e730a6deb345d0bbf9dff47ef5c4925b589f1db4841c1fce746de4f1fa5259c4e8b81b10fef0989a30c925204cd2d6dd58be3cb98d0e9cb18e

  • SSDEEP

    3072:amvG9swA4bcAeDofRDbkeOQBqFOk5EIDXiArs8+Jm4rQ8oRM539:asvNbAdB+Oklv3af

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 024745a24560700e48a396676e4d29f2_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections