General

  • Target

    85c4f8e1d6f46ad59bdf53a6e74eff1140ac0ca8bfa269d9078f956c51b81766.exe

  • Size

    80KB

  • MD5

    b3a7d85b86383396a23f306917fd6f5f

  • SHA1

    fea0a693cfe01bb7b42d363c91a66f9962f0b598

  • SHA256

    85c4f8e1d6f46ad59bdf53a6e74eff1140ac0ca8bfa269d9078f956c51b81766

  • SHA512

    10f484eb96d75baeac0415bb4da208f820bc22b7681d24e71e6fa4b47fd50cd687877c2a2a6c23eb8d9a2324791652c4b0b344f8cb46b0190e5ef9bd8b0a391d

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEcGL0FLqUI7Hb:5dbwovEVyqgoZmZXWfIdQdRaefPDEZHb

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 85c4f8e1d6f46ad59bdf53a6e74eff1140ac0ca8bfa269d9078f956c51b81766.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections