General

  • Target

    1302b385f00e4feb7ff2b4e08073b6b0N.exe

  • Size

    76KB

  • MD5

    1302b385f00e4feb7ff2b4e08073b6b0

  • SHA1

    6b402d53e730b7d435020795f77f7029194ec4fc

  • SHA256

    3783095243322cc7d9bf5fc7796bb7ab5fd795f96e1a34b0e131a0de3820556f

  • SHA512

    42f9dfb1c54ca728358dbb6249dfa4af331cd34b1c6146bb73f2ec0c8da2735cd4556e8d78eb76d1c68750aad386d64739d37a6a7d9f343786235eb733e72dac

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z/D0:c8y93KQjy7G55riF1cMo03ZQ

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1302b385f00e4feb7ff2b4e08073b6b0N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections