General

  • Target

    cafac2501746c0474fcad20551604dc357a7c344f532baa7f55e2b231192848f.exe

  • Size

    76KB

  • MD5

    b1e329c0d55908dadb9d30ca4fd0e450

  • SHA1

    66d84c3669b51ee8e13d035ea8f3c99645e05820

  • SHA256

    cafac2501746c0474fcad20551604dc357a7c344f532baa7f55e2b231192848f

  • SHA512

    eeb0cc4c44b3688dbbb759636ca559802d6733cf287e96677e3ced482e7dc43acfa4970fa8b13295bad29a98326857cf20726ebb608cdcd3b26b47fff4b7b431

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZDraG4Zk:c8y93KQjy7G55riF1cMo03M8

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cafac2501746c0474fcad20551604dc357a7c344f532baa7f55e2b231192848f.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections