Overview

overview

10

Static

static

10

18ff3ad75e...a6.dll

windows7-x64

9

18ff3ad75e...a6.dll

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    18ff3ad75e102f991743e8c8b9053992d01a31d7277bda890bce6754f1cc10a6

  • Size

    76KB

  • MD5

    722778db5864bfc01076184c6420a247

  • SHA1

    e184dafa2d335942225736ad9ddc32de71e2fc6d

  • SHA256

    18ff3ad75e102f991743e8c8b9053992d01a31d7277bda890bce6754f1cc10a6

  • SHA512

    a1981d4ff1d5e224f5984f2661a1e6e0096484ecdd0056f582426dbdf136d25615ab6b70ec822cb32ea8936e93ded1aa058ee27e2b3eacda1bdbe2ed473983e0

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZaNE:c8y93KQjy7G55riF1cMo03Mm

Score
10/10
backdoorupxfloxif

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
    backdoor
  • Floxif family
    floxif
  • UPX dump on OEP (original entry point) 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 18ff3ad75e102f991743e8c8b9053992d01a31d7277bda890bce6754f1cc10a6
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections