General

  • Target

    db2f066347afbaa0003f762d41834953a0597ed4ce706b2848a18263e45ccb05.exe

  • Size

    76KB

  • MD5

    b53b57021de557439f04185a1a6a8582

  • SHA1

    9bde11056aa9157c2ed8bf402d6339c46ce7556c

  • SHA256

    db2f066347afbaa0003f762d41834953a0597ed4ce706b2848a18263e45ccb05

  • SHA512

    843fd7d0340879e0a07669c798b58942a3ad65128dd31419f8c66edc9bc485164b0942db6539ef4433c473b8459d78dd081e3cf6a457835f88eac13db4f876f2

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZVv:c8y93KQjy7G55riF1cMo03Xv

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • db2f066347afbaa0003f762d41834953a0597ed4ce706b2848a18263e45ccb05.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections