General

  • Target

    54ac5d4168cc45cd90f90f9cc0e6be5ea3d00e4f094e766d4e0aea5041990896N.exe

  • Size

    76KB

  • MD5

    de493fc5cb9337101c7b180efecfa9f0

  • SHA1

    91423f6b97052ee806ea10e9c0e71cc5456b74bf

  • SHA256

    54ac5d4168cc45cd90f90f9cc0e6be5ea3d00e4f094e766d4e0aea5041990896

  • SHA512

    507f6d4867a1cd3f6ec77ce402321e7c15f45d910a0ddb97a29bf1adefc1cb91d5efba696ef5aa022ef8fb56d7a30bb027ee824dcae049c58f752731a084bd97

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zn1C+Pa:c8y93KQjy7G55riF1cMo0378

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 54ac5d4168cc45cd90f90f9cc0e6be5ea3d00e4f094e766d4e0aea5041990896N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections