General

  • Target

    aa34697e58dd6c46f7d4f362f456e5a8b5b26c5166a080781f34f9572d3c9106.exe

  • Size

    76KB

  • MD5

    82c36f1600984be79adefc54b879b6f3

  • SHA1

    bda1d67bbe7565a1300740f61f7524f4058a82e6

  • SHA256

    aa34697e58dd6c46f7d4f362f456e5a8b5b26c5166a080781f34f9572d3c9106

  • SHA512

    e9d5651e64e5ae24cf05525c25af2a66d43d36d5dae2a909f92c168b79752a2817f4aa170ebef5938d864324c5950e76d068813969c3a977c17f5823d64dc025

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZER:c8y93KQjy7G55riF1cMo03CR

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • aa34697e58dd6c46f7d4f362f456e5a8b5b26c5166a080781f34f9572d3c9106.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections