General

  • Target

    244cfb2060c51850d8fd4f82542eb3ebc18336ed07d34f543acad9b68c067aa2.exe

  • Size

    76KB

  • MD5

    21362cab76ea6dae97ed3976ac698306

  • SHA1

    dc3093e3cdb7e7f7ec0a05abb219be061e62e9c2

  • SHA256

    244cfb2060c51850d8fd4f82542eb3ebc18336ed07d34f543acad9b68c067aa2

  • SHA512

    8300c8517b30a0a948b2792fe8c25a2808a62ed311a0c49b3a0ded5657a2bb6220f1d17517cce2470edec066096cb9a5b2b6ed482a3dfa3c8807de9c44b01acb

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZLWZH/:c8y93KQjy7G55riF1cMo03wH/

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 244cfb2060c51850d8fd4f82542eb3ebc18336ed07d34f543acad9b68c067aa2.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections