General

  • Target

    3061a7943ff7d31299bcccc474da8650N.exe

  • Size

    76KB

  • MD5

    3061a7943ff7d31299bcccc474da8650

  • SHA1

    1832ad91a4d21ea4750f5bc756a77f7f25208de3

  • SHA256

    bfe9c3eb2dcba8c2a90dbcf5ef1f600f9aefe28a7670d335be805559cb078213

  • SHA512

    4e4ac97ace40ac83216a78b0dff984733ca959787dbc839a1eebacb5dc20b4acd8b7f7cb0d88b546963d3edcf091973942a2f4f64f400b296be213c38cc73e9b

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z+3PQmc3OBzjn:c8y93KQjy7G55riF1cMo03g3PNp

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3061a7943ff7d31299bcccc474da8650N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections