General

  • Target

    JaffaCakes118_5ba64e62511b193a451a0ef1ab45e487

  • Size

    98KB

  • MD5

    5ba64e62511b193a451a0ef1ab45e487

  • SHA1

    f7d0f982c3404beefb85254a6f6326b5f9db3a23

  • SHA256

    af4d48b5f5c115308c2676b6797645e5641f2176fab647b31cf934821cebdd2d

  • SHA512

    303dfd55a9df506a6dc573b9e2432347a2ab50d81f7672361c068e46319d7b8e08d9cab5dacfca992681bcce9e531b5bf62a93443e26e684fc9938e97078e586

  • SSDEEP

    1536:fk3vCKr0u7EGSeLOeps1QLt13nUQvVB8EXOILbxu/PZkx2YvJGam8HwiQ:c3quIGSom1S13nUETeCxuZ3YvcaBwiQ

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_5ba64e62511b193a451a0ef1ab45e487
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections