General

  • Target

    220b69e31187a8152680bd09fe4c0bc0311093f29d9417b8cdde86ff64ef07d3.exe

  • Size

    76KB

  • MD5

    ee2dcba2565bb922cde38688504f2f66

  • SHA1

    21b144f904c5840d040fa94ca7e87c6eb7077a3b

  • SHA256

    220b69e31187a8152680bd09fe4c0bc0311093f29d9417b8cdde86ff64ef07d3

  • SHA512

    d8ed30f8575dd7762aae38d594ed2ea7bddc5c57258e2630ca87ac0180e31a913646ba29d292a53d59a557112bb37dc1fb2a55c96bb5f789a7f3820fbfd1e3f5

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZynF88dNgMn9Q9D64:c8y93KQjy7G55riF1cMo03EM

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 220b69e31187a8152680bd09fe4c0bc0311093f29d9417b8cdde86ff64ef07d3.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections