General

  • Target

    fcd2c9da0b9a467f02c7258009d716a3_JaffaCakes118

  • Size

    206KB

  • MD5

    fcd2c9da0b9a467f02c7258009d716a3

  • SHA1

    35617a84c7e04be0bd4de34868828a2622834f10

  • SHA256

    bfb5038bd3f508323f3b2c31075f942a63e78c976f693631300c13e88a9bc4a1

  • SHA512

    8b994461b828b2c018874c12fab76a941fc97029997e211de450920021e3ce99558089da747af6ee03c121141a29c16e561adeefbd455dc78d690dc67510e73a

  • SSDEEP

    6144:CG7u6jrkwvKaXR0cyYLF6lcBapBdd2p2uSd:z7u6jvnXRsLiATbuSd

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fcd2c9da0b9a467f02c7258009d716a3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections