General

  • Target

    5b005c2e25225fc18c82b02c8b623320N.exe

  • Size

    76KB

  • MD5

    5b005c2e25225fc18c82b02c8b623320

  • SHA1

    fbcf225843ebf840101cae142846ebfbd6caed6c

  • SHA256

    ae8380c86aebf6f7f6ce6eab205269f5737c598b9348550ffd8e338ab943e793

  • SHA512

    a98678620a12fb0a2f2c5c5fdb22f52453839cc5054c34be05c7b3ea334cc827e2e97d0b50fdd03c8b8c0d6a87d4abc0972d4c8b80aae613790f3ba7eb7dc931

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZBaqvnF:c8y93KQjy7G55riF1cMo03PaqvnF

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b005c2e25225fc18c82b02c8b623320N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections