General

  • Target

    4866bb0b702288481bbd1f8cd4f77d10N.exe

  • Size

    76KB

  • MD5

    4866bb0b702288481bbd1f8cd4f77d10

  • SHA1

    729aef51769c9463e1a4fd238ed464db438d6cfd

  • SHA256

    9f56e775b8399651810ac2697948d1e6f73390c8e94e0815c7ece149a911af21

  • SHA512

    a4bc0f4a22b75d788742ac1cee3affbc93369e1b3232e493f554c655fecabb5cd48881f5c4f5a6627331df9567b2338e8154b652254cb09b84127bcd891d9f28

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZRG68G:c8y93KQjy7G55riF1cMo03jb

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4866bb0b702288481bbd1f8cd4f77d10N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections