General

  • Target

    a099d49a12e3c0628793c90958710e1393e1a4b79a3da9b5ea48c14ed4a72912N.exe

  • Size

    76KB

  • MD5

    aacf2b571e09ee27fabb1ca1e57dd3c0

  • SHA1

    6b64e9b4c3cd52b4142f918763789646b3b93b58

  • SHA256

    a099d49a12e3c0628793c90958710e1393e1a4b79a3da9b5ea48c14ed4a72912

  • SHA512

    ec97aefa3e571e0f0c91e100b7f7477c606e69edefaf68af358d5d7518dc2ccf50a983ebe565d70c0de680c099667296fed788192beff9ecb17a3de7d512623e

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z/v5Ws9JMk:c8y93KQjy7G55riF1cMo03tvpLMk

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a099d49a12e3c0628793c90958710e1393e1a4b79a3da9b5ea48c14ed4a72912N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections