General

  • Target

    4c073700ec25f95614da46578836356cec213c88a40bb5cb6a91a64996f32e7c

  • Size

    76KB

  • MD5

    286412f017d72236b06635c210b28887

  • SHA1

    0f8c62fb36fdf1fa9ba3a8f9e9149c2f72c129a5

  • SHA256

    4c073700ec25f95614da46578836356cec213c88a40bb5cb6a91a64996f32e7c

  • SHA512

    b7fb7c5ac77c1830527a8be182bca526bc3677bbd23bda75d97202292ab49382537242bca05b4bf803e448871ece8ebb86b12afbe9dc9ff29869b165edd99f91

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZyH+ZTCQT:c8y93KQjy7G55riF1cMo03ge4I

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • UPX dump on OEP (original entry point) 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c073700ec25f95614da46578836356cec213c88a40bb5cb6a91a64996f32e7c
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections