General

  • Target

    42c4411a711d0ac9d8398264c7385645537bd24b87bcb4d21f41232e5616ca14N.exe

  • Size

    80KB

  • MD5

    d2dc671803c0016d64374ea527075270

  • SHA1

    1a2b8676c0eb91335bd7a5d85d54d1f99c463b03

  • SHA256

    42c4411a711d0ac9d8398264c7385645537bd24b87bcb4d21f41232e5616ca14

  • SHA512

    cf5b5148dc9dc22291c5f621b94e83db0c75b6672c2f475f516dccfe376d66d011ef3cf0dbe42f22b7a7fbefe2fdb5bdd911f42daea4f389894bced68c647ced

  • SSDEEP

    1536:uIcs6msUvrh8ErMInQ+4cw9NVWfjaRkE4LEl8B60Y2lfxxHZPEvB+2i:dcs6v68Erj3w9zWf+SEFuk0/pfPt2i

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 42c4411a711d0ac9d8398264c7385645537bd24b87bcb4d21f41232e5616ca14N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections