General

  • Target

    9911c562639d58368a9a94e732bce160N.exe

  • Size

    76KB

  • MD5

    9911c562639d58368a9a94e732bce160

  • SHA1

    eb0a679fa41db95aef27f6a7b6e79b04c4ef080f

  • SHA256

    fcc769e77d794ca8653e495bbcd0f78951a8fa2ef2fc78273fc621b2f3822c1f

  • SHA512

    911fb4946b4c9268071bb390ab70600b7819616bc47c8b9b9fdd58afd4107e498f7c2fe4d4bd8769496d64a8d58b8b370b8c2d0bba6fa3f74ee49290ed6e3a99

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZyF25E40po:c8y93KQjy7G55riF1cMo03AF25Evo

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9911c562639d58368a9a94e732bce160N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections