Behavioral task
behavioral1
Sample
073ecab1d410c26cc300c87bc154c3a3d4e3e140ddad23eb665541439e108c9cN.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
073ecab1d410c26cc300c87bc154c3a3d4e3e140ddad23eb665541439e108c9cN.exe
Resource
win10v2004-20241007-en
General
-
Target
073ecab1d410c26cc300c87bc154c3a3d4e3e140ddad23eb665541439e108c9cN.exe
-
Size
1.3MB
-
MD5
652982f7bb0862ade16b2badc1270870
-
SHA1
3df4b9c8b3caa84a45e03f6061f87bc3a1204dd0
-
SHA256
073ecab1d410c26cc300c87bc154c3a3d4e3e140ddad23eb665541439e108c9c
-
SHA512
8f97bd92cefd611e35e03f74b8a82a94a65aa5b22782e611aecde35f16c8497bc649fa1b55a82cf9fcc5654e4263c9fa7e5a3f3fbca4e454120fd5c063d6eb34
-
SSDEEP
12288:fBFehDOvuw/p9m+1r2+wGHPaO6pGFMq29Puf4/vGe1W4q3mnPaO6pIA:fBFqDEPm+1vVvx6weqfcvGe1vq2Px6l
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 073ecab1d410c26cc300c87bc154c3a3d4e3e140ddad23eb665541439e108c9cN.exe
Files
-
073ecab1d410c26cc300c87bc154c3a3d4e3e140ddad23eb665541439e108c9cN.exe.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ