General

  • Target

    c0d055b639f435d1e4d4f053b077d0ab5a0928d7f0f9575d1410761ae14a1a5d.exe

  • Size

    76KB

  • MD5

    e665a58d6fddbd757073240ffa7d38aa

  • SHA1

    577670d1a00ee250e5dc0403047f7e8414931143

  • SHA256

    c0d055b639f435d1e4d4f053b077d0ab5a0928d7f0f9575d1410761ae14a1a5d

  • SHA512

    f37a6ef4375dc4c0ec5ce6d152a2ff6df3269578b1345e9e14ecf7b3d97dcad503d97907e23daa91dd9530171dd09eafa4944c3fc3fe3ac6a0f9e451a7c8ddfa

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zbo8gn:c8y93KQjy7G55riF1cMo03y8gn

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c0d055b639f435d1e4d4f053b077d0ab5a0928d7f0f9575d1410761ae14a1a5d.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections