General

  • Target

    2c1a02cdd8a3ee0161861c91a06fff40N.exe

  • Size

    76KB

  • MD5

    2c1a02cdd8a3ee0161861c91a06fff40

  • SHA1

    f51f2f5d53db2cc9fb1fe9002bf16c8b72ece546

  • SHA256

    84e43b6044d2fca0a002c188cbc99e5fe43b48e7eb9023229abc2e212de1821e

  • SHA512

    57f7a57fac2aa97586e5776cb8ca37ba427374fcb68e0b1b3682f43f0d084bf09e97b6146484f03247d66fb62d101a305780e64d8e101c78df98b7684ee1d6c2

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZaORw6G:c8y93KQjy7G55riF1cMo03QORw6G

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c1a02cdd8a3ee0161861c91a06fff40N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections