General

  • Target

    6e46a5208f20b403d933f4548cdaa7794b91b15e5466dbbd152c67355bc204d0.exe

  • Size

    80KB

  • MD5

    e8028fc16f218e5d7bc92058490f7db0

  • SHA1

    95d1b64be0ae981c9b2e93f66166d9cd96729565

  • SHA256

    6e46a5208f20b403d933f4548cdaa7794b91b15e5466dbbd152c67355bc204d0

  • SHA512

    eaead1c0cf5a51b7eb9a2c97e368a3bf991847e5b6157e7ff1b70a98c1630573fcaece166bdfd5f7afdea29ceff0a5b9e4b98e15a15f83c2daf4d48eb2e71f86

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEO3:5dbwovEVyqgoZmZXWfIdQdRaefPr

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6e46a5208f20b403d933f4548cdaa7794b91b15e5466dbbd152c67355bc204d0.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections