General

  • Target

    54e340662fb488b248f43871be99a1d0N.exe

  • Size

    76KB

  • MD5

    54e340662fb488b248f43871be99a1d0

  • SHA1

    3a1dc9b8abb82c56bfc768d315ec78129eab0100

  • SHA256

    1567cd9ad0f9188060c4c7ddd0cb81aaba9c87d96cf7fe3dcf91a0b4f71b4449

  • SHA512

    463b1d9097c7f65b7cd5a39c77e6d5fba56e8f86702482763a51cd2b0d0754848cadb1da567717c7f63232962f285e9b4e7e91f353ec7242830d0673c6b0ba3e

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZrKJ:c8y93KQjy7G55riF1cMo03y

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 54e340662fb488b248f43871be99a1d0N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections