General

  • Target

    150585653bc95a04b8a0e0dd3950251f_JaffaCakes118

  • Size

    140KB

  • MD5

    150585653bc95a04b8a0e0dd3950251f

  • SHA1

    3707b2444c9d2a7944ab6e5f9085a0c2d59dbc66

  • SHA256

    306b85f3d6f822578c49e3fc4efae4325621380979141026782165f1d5ce7b64

  • SHA512

    12c77edd550c2f153365575ae0718fc4295493e6b0d28574aa76569584e61fcf7d97c139734bc2cedb658493c37ac51f91eb7f84701c06a1fa9fef27770156fe

  • SSDEEP

    3072:vs1Diojb87T6uEqscHJJi/FyLVsiD84eN/50Hngg8aN06TvmFPppp:vs1D3jw/6tqscHDXutNusaN06bCv

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 150585653bc95a04b8a0e0dd3950251f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections