General

  • Target

    041eba448ca1e8632d6d5936dd85da30N.exe

  • Size

    76KB

  • MD5

    041eba448ca1e8632d6d5936dd85da30

  • SHA1

    c2c167308f242818194fb48b6f2728cbb9a35550

  • SHA256

    24a66694e2e5c887c883724ec627783eb55e090a31998a445140897f3e4f6aaf

  • SHA512

    9268a8566e62488638b51a58be6b18d0deb81a135e89657da459716117a041b289560b9449bc450b77e5dd5bda9beb9d4cdeb3be3a3fbc0f6ca4b79d34ccef01

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z2yS9:c8y93KQjy7G55riF1cMo03wj

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 041eba448ca1e8632d6d5936dd85da30N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections