General

  • Target

    306af31255403fa564c379e631f6b34cb0108cd7be6168525dce4cb9200e2f3eN.exe

  • Size

    76KB

  • MD5

    6f4aaa04611bb7fb0aa7ff916cbcfa20

  • SHA1

    cff3329767030826782939c0621c2a29afe72e22

  • SHA256

    306af31255403fa564c379e631f6b34cb0108cd7be6168525dce4cb9200e2f3e

  • SHA512

    8adfcdc7b00964061329969dbe9fbb7a90e0a37d2c7b98a6dcf1b92e16a3c9d31764287bbbf16bf7272dd6b203037a4e0afe0903c5ee5fcad77556b3ec0f6c39

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZUY5:c8y93KQjy7G55riF1cMo03eY5

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 306af31255403fa564c379e631f6b34cb0108cd7be6168525dce4cb9200e2f3eN.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections