General

  • Target

    05af99d65b51ec2206cdf0d1f693fae2fbc7796a021dc22c68b6284d3b6b9df8.exe

  • Size

    76KB

  • MD5

    e20853fe300357d6cef8873707ce28a8

  • SHA1

    506d0271666ecb316fd71270846b5df5568bee63

  • SHA256

    05af99d65b51ec2206cdf0d1f693fae2fbc7796a021dc22c68b6284d3b6b9df8

  • SHA512

    798bdaff8c4770252a5eb1486c00648895dd5a253f8cc9e7d67eb44d462f42f6970c83146a0c6f4812aed4bbfa24255dcc730dbdf59b7aa0a8cb7fde2915f4a7

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZH+vOMKw:c8y93KQjy7G55riF1cMo03l+x

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05af99d65b51ec2206cdf0d1f693fae2fbc7796a021dc22c68b6284d3b6b9df8.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections