General

  • Target

    8c9f3fb4168c9e470f0f508eb6d3c790N.exe

  • Size

    76KB

  • MD5

    8c9f3fb4168c9e470f0f508eb6d3c790

  • SHA1

    2ecfa6a0177e8d5f333ce3a15302bcb627e9a8a2

  • SHA256

    94c0a551cc79d82a2b3720591c8a8477fbe033893a85cff59238063a12301a1a

  • SHA512

    7f4cc66cf92355260c47b0aa47cbd9562177655908c5589883cdf1ea7bda5f288bcc0131db053eda268e5982ed289f348ee9c00522e04b4acefc101f23716d9b

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZpQYyuA:c8y93KQjy7G55riF1cMo03Y

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c9f3fb4168c9e470f0f508eb6d3c790N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections