General

  • Target

    67b1a14c5855f3b0800de933e3543350N.exe

  • Size

    76KB

  • MD5

    67b1a14c5855f3b0800de933e3543350

  • SHA1

    37895146b72b04128316f1f671178c56db406bf9

  • SHA256

    f90842f77523e9b98fa6cafbfb97a4f4ea41c9d24f36b1a5ca2d4f11182172da

  • SHA512

    f80a9d07925dfa12cc8b2a949de506ca076f2ca2361222fced9c8bc6272d34ecc6e0134401982a4994bf329f7e5372a8ec35d2cb0ce4ac77882ff6117c616670

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z/GJh5yA05E2C:c8y93KQjy7G55riF1cMo033AYC

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 67b1a14c5855f3b0800de933e3543350N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections