General

  • Target

    5908fd25133b4bda6316b95f1b82465ca36aac6aaee8394841b4e1a99588f131N.exe

  • Size

    76KB

  • MD5

    e9ef06e6742a9f2d892329f89d845780

  • SHA1

    5438893a77c2ad00eb94c7af3a50762841650eaa

  • SHA256

    5908fd25133b4bda6316b95f1b82465ca36aac6aaee8394841b4e1a99588f131

  • SHA512

    2e1f0b5965a2bb2d49d3b7a899b7e3a8d4d903a753b91cb4f21067088c63ac71c30991aa48cc94ed8b10253b680d399d8171dff36f96b5865db4958f87b27a29

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZEVZ:c8y93KQjy7G55riF1cMo03q

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5908fd25133b4bda6316b95f1b82465ca36aac6aaee8394841b4e1a99588f131N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections