General

  • Target

    ab2fe37cd76f9a888c1500a1138b601e1e548fb03c15845d7078f9b7c2ff9156.exe

  • Size

    80KB

  • MD5

    1cf238bbd395edf2ee4f8ee43eba2c62

  • SHA1

    ba661c739f8b0b6586adb39c5d526f9bd0dc4078

  • SHA256

    ab2fe37cd76f9a888c1500a1138b601e1e548fb03c15845d7078f9b7c2ff9156

  • SHA512

    2b730e767b714d6cf0ceaff7861945d322fc8073861e833554cf4fdda448763d526a608a61c1cbb29874f02ddc33661ecd3cc4e13e0e790995b73f4a785322e0

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEdXCQSUsG:5dbwovEVyqgoZmZXWfIdQdRaefPkXCQx

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ab2fe37cd76f9a888c1500a1138b601e1e548fb03c15845d7078f9b7c2ff9156.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections