General

  • Target

    JaffaCakes118_06b0aeedf94df3a4339b38e1ab64c615

  • Size

    315KB

  • MD5

    06b0aeedf94df3a4339b38e1ab64c615

  • SHA1

    cc22a60a103b37f94d2f9d936158481fbd5d9678

  • SHA256

    d707611534a603fe4482c28516ba3b729e4a15b92d8a3046122baf3a7e9d89e4

  • SHA512

    0ba82785e1e8c9b579dba6577b7a40884659f06c644accda936b855fc8c85215e528fc38fe9a459dc1be0705d4cb0ad5c41f891405c838f655fe4678cbac5a5b

  • SSDEEP

    6144:rz72R6v3EgaKoWVmxNZNRShGcF051Ojyp4+wFYlGxktRb630PgB0F+V:rz72BgGW0NZNQhGcF05kjbL2lGxSRLPC

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_06b0aeedf94df3a4339b38e1ab64c615
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections