General

  • Target

    971fec91b63520e7985cc6f0afddff10N.exe

  • Size

    76KB

  • MD5

    971fec91b63520e7985cc6f0afddff10

  • SHA1

    f34b740c83371d7d52b7518dd9bfee9e24a5a398

  • SHA256

    43d46cf367b0c34ee125a6553401f12ee56fdbde52169458b44ddb5672a048da

  • SHA512

    9b037b1ae712c53159f188742e5be941137952367cb8f145af6fac93db1b7e87783a825c94cb419495da7869434fb5e2e2b1f89ef4dd250ab13ee30589b8a2b5

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZjQRxqo:c8y93KQjy7G55riF1cMo03fo

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 971fec91b63520e7985cc6f0afddff10N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections