General

  • Target

    JaffaCakes118_9707baa95b63eb59ebc04ee31d440cba

  • Size

    685KB

  • MD5

    9707baa95b63eb59ebc04ee31d440cba

  • SHA1

    497ebbf02c3a7e92a7da538a064a2e652e0a2d4b

  • SHA256

    3dbf1b6087ddfb765a6a798aad70929304835188355178b4a207f9e574d02515

  • SHA512

    93640607bbe26402bf47f4b39eb5a07206e300228c210eaf73b621b52caaee6df20d39cce7cbcc92d696047e3783b1a97e1192ef1e8a1edb0401a49b50870f6c

  • SSDEEP

    12288:gVKOrsDpsGzfTO+qsDpahahFERXMKYHI0ckB8DgJRLstRGSs5zQtQ5:gY4qa+mM7b8MNIHkxjK6r5

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_9707baa95b63eb59ebc04ee31d440cba
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections