General

  • Target

    9ab4c2156567cc60e5683767b8bc1ed480d2e503e4fc74304d9cbf6e4bcf4381N.exe

  • Size

    76KB

  • MD5

    35ef82e8f46c41f0a62f53657d24b080

  • SHA1

    d4db73b20ba306bf333961aed0299f9e24ab69f2

  • SHA256

    9ab4c2156567cc60e5683767b8bc1ed480d2e503e4fc74304d9cbf6e4bcf4381

  • SHA512

    b35704ae868fa744b06e60655abce6fb0658fe8c9a76875c556cf61ddae1a561513e729a87cf100c9c7369d23742f8fd73dbe4d46981d0f602f5d6beb743e469

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zpgy3:c8y93KQjy7G55riF1cMo03Pg4

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ab4c2156567cc60e5683767b8bc1ed480d2e503e4fc74304d9cbf6e4bcf4381N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections