General

  • Target

    5ee1980adda64381bd7890c64cb7d1c0N.exe

  • Size

    76KB

  • MD5

    5ee1980adda64381bd7890c64cb7d1c0

  • SHA1

    09eaad70acecbcd0a5abed88d811a8dee207042f

  • SHA256

    de31689022c283443fca6778d67d31d8c915870145503c59e6c28c629b9665e8

  • SHA512

    de8278131478c835db2ed7a4b48e68d5ab2dbf1651300ba6f82f18f4c2b6e08c3ddbd8a00d0d114efc94b79594cdcf73138423e0963b39d2e6df26af84a27b22

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZdnWj1Itb:c8y93KQjy7G55riF1cMo03DUCN

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ee1980adda64381bd7890c64cb7d1c0N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections