General

  • Target

    JaffaCakes118_00675d3d4dbf7beba3755c0c89fedb50

  • Size

    818KB

  • MD5

    00675d3d4dbf7beba3755c0c89fedb50

  • SHA1

    2e1957b8fab2f47999ef338e7701ae083e9c36f1

  • SHA256

    c4d4347e8aec51954b2ee8a2f5b3c0e146634a3844b6c36cb3455969bf485586

  • SHA512

    2348be50d739277ef99509cd5c856a1532fffe5ae53e5b0cffe66c658f748fd53086b3b7ce06f1bb7b0397378821ce1b3f493d6835f1ed42975067091d1c9902

  • SSDEEP

    12288:yugl095nSxHxzsFb+4pbzsUn7TFLv0o3mzYRoSLTKMbT:Zy0XSxH9so4pHZNTGcPLTdT

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_00675d3d4dbf7beba3755c0c89fedb50
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections