General

  • Target

    c9745336957c7f1788a5d9951ff1ec21708b45b8a5d2bc7d3669f8295f654d0eN.exe

  • Size

    76KB

  • MD5

    11f0bcb5dd792392aea148c583308550

  • SHA1

    06d004a1fe9e684a560a1bf3f7b8dd10e02ee7cd

  • SHA256

    c9745336957c7f1788a5d9951ff1ec21708b45b8a5d2bc7d3669f8295f654d0e

  • SHA512

    ff6ecc6aa8bbeb265b024bb7f168e880385d62025112a54527837abf2a48f987c81c5824a0bc8aab9207b3b392774e0b2de1163490c2f053e2659f11cc64df05

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z44He:c8y93KQjy7G55riF1cMo03qz

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c9745336957c7f1788a5d9951ff1ec21708b45b8a5d2bc7d3669f8295f654d0eN.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections