General

  • Target

    e83db1a7869c9e87b33736875765ab7a_JaffaCakes118

  • Size

    98KB

  • MD5

    e83db1a7869c9e87b33736875765ab7a

  • SHA1

    539fac361eaeed508d7cf0b18915c54e77f001be

  • SHA256

    09ab96f15eb667dde711f954851b1c5e322a5b11b43f2e61ccaf0ddd16512ade

  • SHA512

    e355a1c58332d1fde97a568bf7cbb61e43c2f58eed914e417ac9174df12829bbc2e8fea6a6c61d87f56b59821d36f2225c98e0ce6a37605d5560f46dd6a1c124

  • SSDEEP

    3072:P3qu2iVSI/u6Viw0fkJBIcp3wL4HFjL5ai:X1AImQiZfkJBry4BL

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e83db1a7869c9e87b33736875765ab7a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections