General

  • Target

    2cbafd911124443040d2e3b2db00e500N.exe

  • Size

    76KB

  • MD5

    2cbafd911124443040d2e3b2db00e500

  • SHA1

    22eea8e1814de439b7534d1fb6e0e450aa29500c

  • SHA256

    50b5677e1dced0d1df24e2b29f755e187b6475ce0f66a15ec9f904a7e1b7e2e0

  • SHA512

    15e4a2002c5ea2e2614ccbed138b3703eb97e745923c41292808417b52740fe8b5a74a73e19b3f7e5db0052936cddd811e434e7651b22d1dd3a53005d02ff125

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZqYYEOiK0:c8y93KQjy7G55riF1cMo031N

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2cbafd911124443040d2e3b2db00e500N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections