General

  • Target

    524a39b617bc9e2c8836431a86aa5940N.exe

  • Size

    76KB

  • MD5

    524a39b617bc9e2c8836431a86aa5940

  • SHA1

    7e46eef91d4b74327d5ad5ee9a38d4dfa3fe8bc1

  • SHA256

    869a19624bfd51379b3e7a38ec10041d3d15d3131d362af057d43cad9ced6d62

  • SHA512

    2125abe51458f9fa1f19b310ac3bcb7557fe9967f64de68febc82a49a61477f2eb1c1847cf1e86420d95f20ee7726079579a268a2ec3a599af4c965bfa7e25bc

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZL4X8d:c8y93KQjy7G55riF1cMo03FO8d

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 524a39b617bc9e2c8836431a86aa5940N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections