General

  • Target

    20e763e6b0cf2eafbd6036c025f82230N.exe

  • Size

    76KB

  • MD5

    20e763e6b0cf2eafbd6036c025f82230

  • SHA1

    afea0d44043e6e057ffe65dd203b55f51e9e3de2

  • SHA256

    1adadcd1368908aa31d0fc84f6c9683bb88da918cc7fb234ad60d23ef675bcbf

  • SHA512

    3b16ce33ce385eeda1a4ffc9fb1bfa2f79bb817c5c776dcb9c04def429512c02a841c34d8dc21c351b527b63fe1349abd5fee09268c3cd7d48fcc5918775ea61

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZQORw6W:c8y93KQjy7G55riF1cMo03WORw6W

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 20e763e6b0cf2eafbd6036c025f82230N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections