General

  • Target

    618b5a39451ae395dff9162d54b1c2309d4bd6413ebf4a09102b69a4d5405ccfN.exe

  • Size

    76KB

  • MD5

    6178cab3db7e6a3e3db8bb8441d90000

  • SHA1

    58569ce68b0b4aa4406dd86b70f6d335a3a31107

  • SHA256

    618b5a39451ae395dff9162d54b1c2309d4bd6413ebf4a09102b69a4d5405ccf

  • SHA512

    e94830b3a812f5fb042055a14201cfba34c5ba540fcd5aa056ec81b4f3184c8b8a92825bb4bbd0506298f81aec993eeb4e33549070960a9dfb4ba3bf26af170c

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZZ0YXOQFV:c8y93KQjy7G55riF1cMo03HXnV

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 618b5a39451ae395dff9162d54b1c2309d4bd6413ebf4a09102b69a4d5405ccfN.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections