General

  • Target

    52d04dd139f776269799b74c669e68eca8f87598ff8bb5ff2bb1983a52eb9476.exe

  • Size

    76KB

  • MD5

    c528eec271e2a8107129e53872663a4a

  • SHA1

    13f843cc060f98f20f9d15a46eca31f400dafec6

  • SHA256

    52d04dd139f776269799b74c669e68eca8f87598ff8bb5ff2bb1983a52eb9476

  • SHA512

    ea2122c3abdd7241d45a73fe59262995f9194cb435c6560aee2d709f8644a1b4779788c2f62941a935fa787eed92cac55676d968bf94f7b81cb3f19cd63cbaf8

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZLSL64k8L:c8y93KQjy7G55riF1cMo03f8L

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 52d04dd139f776269799b74c669e68eca8f87598ff8bb5ff2bb1983a52eb9476.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections