General

  • Target

    2ca0e130e98afa5c1e866d04a528ed5b8f16e619f818c3f88e6f8e868b64291c.exe

  • Size

    76KB

  • MD5

    0fc5e978fad54a51a3122790117d9229

  • SHA1

    6aa9208852e04ab7a1925d614b65b8285a836e4f

  • SHA256

    2ca0e130e98afa5c1e866d04a528ed5b8f16e619f818c3f88e6f8e868b64291c

  • SHA512

    826c7f1059fed6bc1385fd546b1a56e2c17fd8f1cf5262aa3d21f64ec713874388cef3ce18a11fad6f84439440abbdacb39a726abb2d393f947a75bd812d0682

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZIuYi:c8y93KQjy7G55riF1cMo03/Yi

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ca0e130e98afa5c1e866d04a528ed5b8f16e619f818c3f88e6f8e868b64291c.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections