General

  • Target

    def816b9d2525b8ca104169d12d473f06503aadc3386038cc1d176ed41e8262aN.exe

  • Size

    76KB

  • MD5

    b57c746ef1f55dbd4e196f88db1d0da0

  • SHA1

    81e202ff4947cfe6a4c484077bde1209291f0c2f

  • SHA256

    def816b9d2525b8ca104169d12d473f06503aadc3386038cc1d176ed41e8262a

  • SHA512

    853cdc6fcf5f204e4f3a858fc6f33c789580ba70a5beb0da45b39a397d7c6a3ec84a1c5780195d78cb3ac6b9b10e1ecff2b0f6ff3f46ff30d0ca9b92e32e9f80

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zj5:c8y93KQjy7G55riF1cMo03/

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • def816b9d2525b8ca104169d12d473f06503aadc3386038cc1d176ed41e8262aN.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections