General

  • Target

    13cef6e05e798a61689d321cfd8d29b0N.exe

  • Size

    76KB

  • MD5

    13cef6e05e798a61689d321cfd8d29b0

  • SHA1

    8f8353839851e86b922562252a8743041dccf6df

  • SHA256

    0421c18dd9519e31d19192aa04da6afa9991e6c06cf1a145ee65361e1b6913ab

  • SHA512

    e294e978e88157b3c162bf48b652eae0747176623b04bc958cb2f74d5dd27f1646cc987a45c21e29faf17f6a63abe4ec861ee26cd87732da64ad1574e0a444cb

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z114wrvDa:c8y93KQjy7G55riF1cMo03ta

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 13cef6e05e798a61689d321cfd8d29b0N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections