General

  • Target

    9fff66331b3ee11d6bad316dc50e22536b43645ce93c4a2bf9d49dd69fd29288.exe

  • Size

    76KB

  • MD5

    5cdfbf938e217f1058c8ffb30eb35a37

  • SHA1

    9c3c4f0f8497853bb39c2cc9834b0e8caccb9af0

  • SHA256

    9fff66331b3ee11d6bad316dc50e22536b43645ce93c4a2bf9d49dd69fd29288

  • SHA512

    b46989d96b522326d2cab3c9c0f2034de6a3b5e816f327e83d9e33f3c519cfb8ce9ec0128e782d9a981ed50cf88f9b4b10120da0230e76c767809d18ca1eb0ce

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z4zsau:c8y93KQjy7G55riF1cMo03Whu

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9fff66331b3ee11d6bad316dc50e22536b43645ce93c4a2bf9d49dd69fd29288.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections