General

  • Target

    16b29723d28dbdadbd8fccd94135ccce51e00f0ce854cc94a272187de20c46edN.exe

  • Size

    76KB

  • MD5

    94b6505e064bd147ac1e80bdf8c02870

  • SHA1

    cc99100a036ebb13dc181d3fae8209abf58236e1

  • SHA256

    16b29723d28dbdadbd8fccd94135ccce51e00f0ce854cc94a272187de20c46ed

  • SHA512

    12112fcf71f46921c29ce2a17f7336566749208dbd98f5d0e15e5c58760547c7b56acbc1bd51be52c49bdc4db3da5a93f6aa7542bd44d20101295b047c44a227

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zgld:c8y93KQjy7G55riF1cMo03Kd

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 16b29723d28dbdadbd8fccd94135ccce51e00f0ce854cc94a272187de20c46edN.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections