General

  • Target

    5254a0b47466ed4cb719f9a743732cf0N.exe

  • Size

    76KB

  • MD5

    5254a0b47466ed4cb719f9a743732cf0

  • SHA1

    29bbe475dc67208b02d9b474d25ad1e2e0957e5b

  • SHA256

    64c0e8da7ac05f789ad30e7cf8259d4208e238741d1d83c4abeda90a20882b22

  • SHA512

    18d0bb2859ceffba0d9e680bf02b333f204dec8335e59d0d907f8dbbbf28c4dd0537b0549ffd0b91a37196bc7aa57a5499ffe2e856175e92a330a44b303fd534

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZkWKF/:c8y93KQjy7G55riF1cMo03UB

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5254a0b47466ed4cb719f9a743732cf0N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections