General

  • Target

    e4db27dfe52b086ab793e0eb924dd1d8_JaffaCakes118

  • Size

    39KB

  • MD5

    e4db27dfe52b086ab793e0eb924dd1d8

  • SHA1

    51556a0c986c3112d99212bde198185ca8692b87

  • SHA256

    db187c2cc5b0e783377081921f95b8e01e847c9578e44aac4556a3604ea9c774

  • SHA512

    3b2f0bc7d1b0276bd5995107417d12eb499900006bdd6807010b2f785b8097cad77aa050d1c3a8b546d2b60e39152469e5d455113708de90e2c3fd1199b7ce91

  • SSDEEP

    768:5bv11L3BodkNvBc8Cnfxk5kSZCnZJ0Q76ObDriX59O0B0DAYfLLy1tCh2Vy:5jzlIkNJc9zSEX0Q7vnCH0D7HwggVy

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e4db27dfe52b086ab793e0eb924dd1d8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections