General

  • Target

    853a2a0f78aa3e22eafa90d0f0659850N.exe

  • Size

    76KB

  • MD5

    853a2a0f78aa3e22eafa90d0f0659850

  • SHA1

    3284a390991df97a40f6cb8679bfda00d70bf981

  • SHA256

    b7d0df5ee0408544b1965b2608ed63111d9e12cada698619feea77d1f70f2e65

  • SHA512

    451a126aba8ae551ccd9b6cdcf4f22107901ef7867de272f84d218a5bf9a84215ccc0d552789e0d5912f6ef9a50ea98131ad7f37606370b816129c1e154dbb27

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZWnCGBUN:c8y93KQjy7G55riF1cMo034BUN

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 853a2a0f78aa3e22eafa90d0f0659850N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections