General

  • Target

    4afdad18bb81bf879f1a1407a6eecd40N.exe

  • Size

    76KB

  • MD5

    4afdad18bb81bf879f1a1407a6eecd40

  • SHA1

    3059646a4b2bdb979ee3142790c95527ce99d194

  • SHA256

    e918554e6a9665af01ca9be92059241033a36a00471c406c15b00b63680557ed

  • SHA512

    68047f6c885de3d04ea81f94bc6a470ccc7b7e726670fc28dc1a93a50dd9a6412ec0bcaa88567226a6cc754459a076118ec9247acd847d121799d99fb97c22ee

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZI0i0:c8y93KQjy7G55riF1cMo03iv0

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4afdad18bb81bf879f1a1407a6eecd40N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections