General

  • Target

    4f20680751618e92c4e9990b26f0584a44644bc6d73b1e717679de990e77dd61.exe

  • Size

    76KB

  • MD5

    6e6a79c337e0bee421286a57b07532cf

  • SHA1

    6c6d0b3bddd3074c5142bd050219581a92fbb407

  • SHA256

    4f20680751618e92c4e9990b26f0584a44644bc6d73b1e717679de990e77dd61

  • SHA512

    52c518c9edd42e65efe3b369394edb4df0b8ffc9df475d9411e2cdf0ba2c4f6fccc096de748070bfeb1035d3f472fa0ea9c22482ad7d37b8ad6cd1096763c749

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZN8JX9PME1zxoP:c8y93KQjy7G55riF1cMo03QQP

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f20680751618e92c4e9990b26f0584a44644bc6d73b1e717679de990e77dd61.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections