General

  • Target

    bd8c6b416be85eb15fe41400211ab6884f2a9481e270f3610c2b4d058eadfe68.exe

  • Size

    80KB

  • MD5

    fbf77a7949c96770cf99b80e186c20ed

  • SHA1

    272a23a6f9c0f2475a03a3f49fb4f38667d7f9ef

  • SHA256

    bd8c6b416be85eb15fe41400211ab6884f2a9481e270f3610c2b4d058eadfe68

  • SHA512

    5424ac6cc5ed545231da5f72f476595d287de6f3b17429e1ed31fd3a6c651088ec6ba1504dab0a921d2a37c6b251501a016af87ed806e6b2c3639d4fc4c2cd11

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEhR0KXW+OY/j:5dbwovEVyqgoZmZXWfIdQdRaefPCRhVv

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bd8c6b416be85eb15fe41400211ab6884f2a9481e270f3610c2b4d058eadfe68.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections