General

  • Target

    1b2b14a788f22be146b11c2ce4d232c76a7975c32c3f316406cea29d27009db4N.exe

  • Size

    76KB

  • MD5

    ee01387ed6470528d875b77ca586ae10

  • SHA1

    1cd141befa57054decc9c28c9c6e530320e474da

  • SHA256

    1b2b14a788f22be146b11c2ce4d232c76a7975c32c3f316406cea29d27009db4

  • SHA512

    9e7fbd860fb77f9b7048922ee7df7862ff31d702606885eb63d9e05a0f0f283097df7f965ee87a412c86c1f386f2b548241f26b4419b126f0d492815bca9a211

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZHI9d8PLd:c8y93KQjy7G55riF1cMo03W9d8J

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b2b14a788f22be146b11c2ce4d232c76a7975c32c3f316406cea29d27009db4N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections