General

  • Target

    eb402e4ec28bae5fd9df88331f45fb23f88bc03bc0ddc4bb62b0dc0934f6f13aN.exe

  • Size

    76KB

  • MD5

    45c5c113d8943f83cdd0d94a63652d50

  • SHA1

    070090da03105635ded3fa7f8df1d63bd62abfc8

  • SHA256

    eb402e4ec28bae5fd9df88331f45fb23f88bc03bc0ddc4bb62b0dc0934f6f13a

  • SHA512

    ea80d2767e748a2ae9546c52dafaffca43c74feb2029de4b8cbef010417bf01e99ba7a75a41299ac6c8c13ba6e344e6c832f9cb946f20b88bb50a7a9c0bdf8bf

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zn0p/CV:c8y93KQjy7G55riF1cMo03zV

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eb402e4ec28bae5fd9df88331f45fb23f88bc03bc0ddc4bb62b0dc0934f6f13aN.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections