General

  • Target

    fac35f037e1cf05d36091f25d66ea130N.exe

  • Size

    76KB

  • MD5

    fac35f037e1cf05d36091f25d66ea130

  • SHA1

    52d132a65bab3ea351fd0da81e59048a52f71061

  • SHA256

    7af5a4f382b9155a3a0b955ec9f3660a7b1d8c5d2decb79668649e702f12fe89

  • SHA512

    64d24c2a331b73b1c3532400d257d64f059340bb48490d1640914c67c37b78875ea653bda7932d0d0d2e3c50c16178dccfd2d1c57eb182af23d1572005bf5e2d

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZqzQWSlLp:c8y93KQjy7G55riF1cMo03szQWST

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fac35f037e1cf05d36091f25d66ea130N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections