General

  • Target

    6f9aad79339616dd6191831d303fe0f0N.exe

  • Size

    76KB

  • MD5

    6f9aad79339616dd6191831d303fe0f0

  • SHA1

    e55aa5f329a1b1f8e39993e5c655e2282fc9a05e

  • SHA256

    e2fddd4a79d8f8622a4aeea2b8377dc94d96f4865fc56f9590d126b403d3c48e

  • SHA512

    bef39942d0e0b7498a2b0a6a721858d3e593f6de6ef1648641d4ad8e06e27e09b0215d4490a5576dc8585fa92fb021847d1da253273597f25c13fa3e283788a6

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z74PN:c8y93KQjy7G55riF1cMo03J4F

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f9aad79339616dd6191831d303fe0f0N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections