General

  • Target

    JaffaCakes118_054e3fce00f7c296a7b33aaf7259859f

  • Size

    43KB

  • MD5

    054e3fce00f7c296a7b33aaf7259859f

  • SHA1

    d8ca97a1e897cc3df468790f242fffe2c6f5749e

  • SHA256

    01db0c248f2f1a90d746f5e51402b1c87769e169cbb9afdb01705a5e9611d6d9

  • SHA512

    11bd7caea52118633a2383a4763dcfbb53eeae09c4f2ae60ae3045e0c6584c5f6ae69dada152ea341cae3692b85a1b46ab251e0f887c4d52d34e8f126a074863

  • SSDEEP

    768:d2uRm5u9883lr294jrUyR8Ac8k6YkcqAOTC5J8cIlSx5E9AqWiDgtQbr:dquPxjR1caQ3IC5J8cxRir

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_054e3fce00f7c296a7b33aaf7259859f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections