General

  • Target

    f32749be61ab066e64130eb3c48df330N.exe

  • Size

    76KB

  • MD5

    f32749be61ab066e64130eb3c48df330

  • SHA1

    49a6f4a9e846c72ef789070c0960893208ed8505

  • SHA256

    f3a6ebe4d1ba95e18c40750553581b846a87a5551ac01e6cadc8638939794b2f

  • SHA512

    cc0fe2ff26b9144fd2e2934d7d27f5080d3ff11a5b7f3cebd5f074b4103958d75e61eba6b65824e0f304143be24ededcb2f8333855c5c52ad6639fc048cbf380

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZU5bG5Pox:c8y93KQjy7G55riF1cMo03K5GK

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f32749be61ab066e64130eb3c48df330N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections