General

  • Target

    52020736bbc3849801a4c359e70d8db756437f9a708be11555d1c760c9ae51dc.exe

  • Size

    80KB

  • MD5

    1f69814d7e23d502f4dcb6977e6f7db6

  • SHA1

    b10acd416af35cc77dabd936bef3427833130d7d

  • SHA256

    52020736bbc3849801a4c359e70d8db756437f9a708be11555d1c760c9ae51dc

  • SHA512

    e50c857c17a9d175cdf84e1d601c5b2990c5d5e869945573aaff31858647514406673207850db07d733107b0e1e6d3970a432e8c591eaa050dafded7ea7ada86

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEJl+qoq:5dbwovEVyqgoZmZXWfIdQdRaefPoca

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 52020736bbc3849801a4c359e70d8db756437f9a708be11555d1c760c9ae51dc.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections