General

  • Target

    4fb7a2da4b168d939b8691bcb2d404a5c913eb4e92d21681ab8858d96be8302c.exe

  • Size

    2.0MB

  • MD5

    ab9cd17c4cb0b9c9f2758e7871d288c3

  • SHA1

    80f21d7060f2afefc921a1a06762ab87d2e15022

  • SHA256

    4fb7a2da4b168d939b8691bcb2d404a5c913eb4e92d21681ab8858d96be8302c

  • SHA512

    5292e3e01d98e977dbdcce8b04d27e9f182d077fc644e3313b7d83313a8b2855da9ad8d842e64b8d9fa7314c92c6b279f5482ee93c554264231e1b5b3e44dccb

  • SSDEEP

    3072:7ymWUDof3tPw6id8wgRgPqnEyMVX1bbXm8p8qDeWnVKez6KNXNOrsza3rSy2C2Yf:7BWEoPZCErEl1bbj3I

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4fb7a2da4b168d939b8691bcb2d404a5c913eb4e92d21681ab8858d96be8302c.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections