General

  • Target

    af28df8ea9f38d1f8f5de648c105b5ecc6fe1777716c87bcaad0d7436aa63b3d.exe

  • Size

    76KB

  • MD5

    a4e491914ef0bf54c37659660754ce02

  • SHA1

    7c1d3804bf305f85ee39f9d3dc98151547693f3f

  • SHA256

    af28df8ea9f38d1f8f5de648c105b5ecc6fe1777716c87bcaad0d7436aa63b3d

  • SHA512

    d02974d2a432ef12d26a93f1142f17e53956cd180e20a334ea02c8bb6adcc507094cbbe4b9073184488386a14a042098b849b2ca82ce7b5cc0295a432ccf8c54

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZgSEFDyEX9/bF:c8y93KQjy7G55riF1cMo03uSERdX9p

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • af28df8ea9f38d1f8f5de648c105b5ecc6fe1777716c87bcaad0d7436aa63b3d.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections