General

  • Target

    b1b252735de4fb4b9962698915d4f14b0433c660094a93736df30f412d56428eN.exe

  • Size

    76KB

  • MD5

    87d5db8c86be6afef36db1aa48904060

  • SHA1

    40e688dcb603ceebd26c3dfa933a0b071c07d004

  • SHA256

    b1b252735de4fb4b9962698915d4f14b0433c660094a93736df30f412d56428e

  • SHA512

    bc86b99b0b2a10acf0ff4660b1bbc0a2b81ecd9636377432036e34bd740383c706e5afb8f1dfd748f5f757f17826b6cfb7cdaa21c9d52456a0ac7a6726c5d1c2

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZCX5kmDb:c8y93KQjy7G55riF1cMo03exDb

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b1b252735de4fb4b9962698915d4f14b0433c660094a93736df30f412d56428eN.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections