General

  • Target

    cb5c74ed34d1b29ad81dfcfb30036434be1f0b69e4e0007feee11a3b99e59cc7N.exe

  • Size

    76KB

  • MD5

    2657efae2a2ece0dc1ba3d1be79b62a0

  • SHA1

    fea4f2d9e616433a7c408cae6b4f25c93219fba3

  • SHA256

    cb5c74ed34d1b29ad81dfcfb30036434be1f0b69e4e0007feee11a3b99e59cc7

  • SHA512

    c829a25abfa715b873d0f6d5857862b01e23f6228a34ed7d72571f481905ac2aed6b853860a1cd9d83a4e70faa3fa758705828e5bc3603277f3ca38048716987

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z+MfT/rN:c8y93KQjy7G55riF1cMo03tT/x

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cb5c74ed34d1b29ad81dfcfb30036434be1f0b69e4e0007feee11a3b99e59cc7N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections