General

  • Target

    2e3cc8c993c92ca27dd0decd67e22f40N.exe

  • Size

    76KB

  • MD5

    2e3cc8c993c92ca27dd0decd67e22f40

  • SHA1

    56b98604a012dfcf1af888b7fcf2ab2d0d61a152

  • SHA256

    8800da491e9a95867c52c7ac7ac60ee72481f7bc92392c9030905425ab7a605b

  • SHA512

    9925a0d230733e76873f3f930a4c98bb1a2ee1d2ae0b6947c65e2b0d652705e225a74b4b9379c1fcb52b90c8c17c4c1aa206e9b08509fa56866713d5e5b16a95

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z/moFo2Pqg:c8y93KQjy7G55riF1cMo03hmoFoK

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e3cc8c993c92ca27dd0decd67e22f40N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections