General

  • Target

    0dc66a443fde5dd32d6a72a39d5da99559e0ead9a3f5b527700f3973d0065120N.exe

  • Size

    2.0MB

  • MD5

    35c68e28e4e66c129287b498f11c0fa0

  • SHA1

    3bbd6cbc6886b1c0a6dbb0a46892c8672726c4b5

  • SHA256

    0dc66a443fde5dd32d6a72a39d5da99559e0ead9a3f5b527700f3973d0065120

  • SHA512

    f0d002416711d63ad0fac62887da759db41ea818143fe241945f8a041c7c7ccca52b7ce3939e67487db8338ded0762a7c09ced9a39861957b71567ed8b42dfcf

  • SSDEEP

    3072:7ymWUDof3tPw6id8wgRgPqnEyMVX1bbXm8p8qDeWnVKez6KNXNOrsza3rSy2C2YF:7BWEoPZCErEl1bbj3I

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dc66a443fde5dd32d6a72a39d5da99559e0ead9a3f5b527700f3973d0065120N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections