General

  • Target

    0ddd70b54e5a4b5acfdeb4f4f2b2afce_JaffaCakes118

  • Size

    136KB

  • MD5

    0ddd70b54e5a4b5acfdeb4f4f2b2afce

  • SHA1

    c967908b61bcddaadcc64b239ac8c062ecbecc3f

  • SHA256

    fe3d73d2cef7225e7abdbdf43a31d6891ab873b3095a47c08de86fdde906250f

  • SHA512

    332e18ddd4ce781df0eaae8cb63ba3895e86682f66d8446fa344575fd83b1c5603bd042887d31b68f87eb4ea343a20458b537fc703e7a0d988bce98d5de7b5e7

  • SSDEEP

    3072:z3quhPqCW7M4O3FY3SGR0VwLx0LGtkx+MKQdONTntLbkM:7hPqCW9JOVw90Lk/MKV3J

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ddd70b54e5a4b5acfdeb4f4f2b2afce_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections