General

  • Target

    b6a1301da71d4792c94eeb4e198ecff9cc41275de3f5f59ef28f377e7dd0f991N.exe

  • Size

    76KB

  • MD5

    046110653bd5f38a0176e93389de5050

  • SHA1

    da2873c99ad94dcbdfb4803d85a131df8e360b74

  • SHA256

    b6a1301da71d4792c94eeb4e198ecff9cc41275de3f5f59ef28f377e7dd0f991

  • SHA512

    a116b2944e9ea99e9fe108b39115160f8319e66dcbfdfc0b8ed08d218250637509f695c4d591819207dd54efbd86e2f8cafda7fbe1e5856e037a4a23d33325d3

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZynLm3:c8y93KQjy7G55riF1cMo030nLm3

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b6a1301da71d4792c94eeb4e198ecff9cc41275de3f5f59ef28f377e7dd0f991N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections