General

  • Target

    e960a50e8562a12216efc6ae34989f30N.exe

  • Size

    76KB

  • MD5

    e960a50e8562a12216efc6ae34989f30

  • SHA1

    8d37a136bf560d231d33567c1c1d84bba7ffd642

  • SHA256

    511b1a63e2aa7d0ee86cbbd33fefaa9c941b06291c344e84c95a40ca1db6044c

  • SHA512

    1d7f3c2227c6ff6d73efe665196a6b09ddebc30ac7885204b15eb3b9011331c035188aeb427dfc1920505659bf23cd5378f98502cf602ddb6725e1a9cee49a1b

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZgwKTs0kH+BkxAW:c8y93KQjy7G55riF1cMo03KTs0kH+Bkb

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e960a50e8562a12216efc6ae34989f30N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections