General

  • Target

    JaffaCakes118_02834ca1ee7a3899bef818f98236ad08

  • Size

    294KB

  • MD5

    02834ca1ee7a3899bef818f98236ad08

  • SHA1

    93e8504fe754afba08e0d6124456f4e5cab6d12e

  • SHA256

    aeaa0a82b77e6f9be47dfae6b87b4e6c7113fcdc9c433bb5e9ebec9613318d8d

  • SHA512

    706f297ef89824c3e4012b117cb6e81bcba3daeb16beca6639b34e4a226c20ecdcb4482ed5a25f2dc1bd500c75f9adf8af65423f57c86b6d119bdf34581b3964

  • SSDEEP

    6144:l4hJQM/KsXoMDGWmV9Jw9DY7yQue0VkIcYRHoO3iQjv4YGKSKud5Bx6MmdL0:lQJQIldSNqlYCequOICQ65+QM3

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_02834ca1ee7a3899bef818f98236ad08
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections