General

  • Target

    5df349e2d92df8c5fd84e39469abea60N.exe

  • Size

    76KB

  • MD5

    5df349e2d92df8c5fd84e39469abea60

  • SHA1

    8b56a725ffd99a880adbfbdd4aa2307429073045

  • SHA256

    9d3bebcd1f22f9f981251038eb01d0a50fd13d826690d6174a91dba31a762eb9

  • SHA512

    582b09eb89fe8b7274ce1b707a1ca927dcd941411e6194fd04b35b15b71ea2465a5bf4d2bb317893da0864f8a845a482247025ba003feb3c8be422df6d74dd52

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZvjY:c8y93KQjy7G55riF1cMo03RjY

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5df349e2d92df8c5fd84e39469abea60N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections