General

  • Target

    04adc70493a767e200374c2966141ba0N.exe

  • Size

    76KB

  • MD5

    04adc70493a767e200374c2966141ba0

  • SHA1

    af0dff4c97cc9dc99ad402be5d2fdb653f99db7e

  • SHA256

    48a39a7f6b932d0320fbd3ae01b115b45fbed26766499968039c66dbc1034770

  • SHA512

    b70c75a1c19b4e793aaeb928f3b6d1d870f186b16a7c65dda935a6b9ec06a9a5313b1579433aefd0de1d01f869220bde029709da5579b80d2b969262e56daa61

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZaWSGhFW:c8y93KQjy7G55riF1cMo033NW

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04adc70493a767e200374c2966141ba0N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections