General

  • Target

    08e8f5f2d9fe2a190451cafae6e2e8eb6ee4d1f8af6cddb19dc7445256fb25bc.exe

  • Size

    76KB

  • MD5

    2e75f6a0e14408d5b671c927db8e2b75

  • SHA1

    b6f7623ad4e7fa3ca9cb9e7f61ba7ee7a12bf498

  • SHA256

    08e8f5f2d9fe2a190451cafae6e2e8eb6ee4d1f8af6cddb19dc7445256fb25bc

  • SHA512

    132b1e6fbc1198f6541cfe4353e77709790e85c283987ab3dd2f7a01485424801c10dd1e21e718da4fc4de2cec9a8b11ffa08f5885536e00c94a978220c91cd5

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZAeZo2:c8y93KQjy7G55riF1cMo035l

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 08e8f5f2d9fe2a190451cafae6e2e8eb6ee4d1f8af6cddb19dc7445256fb25bc.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections