General

  • Target

    1f5eac2afa8f075c14ba6e17e52216c30b9dfb1c8ef9d0c7e944717dddefa419N.exe

  • Size

    76KB

  • MD5

    b9e917d23a360a225472d2024cf3b0f0

  • SHA1

    6d8edbe6227c712178f0de574fd8b2a79d34a6cc

  • SHA256

    1f5eac2afa8f075c14ba6e17e52216c30b9dfb1c8ef9d0c7e944717dddefa419

  • SHA512

    b5b6cacba37fe56f26b786c57d4becccb4b1eb1c08b68b9636fc66a0429c28c4d4993a4a9311099505ea4baa962b0bad1dd3787493f46112e23ef1ed91f43a82

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z3abdg:c8y93KQjy7G55riF1cMo03cy

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f5eac2afa8f075c14ba6e17e52216c30b9dfb1c8ef9d0c7e944717dddefa419N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections