General

  • Target

    daa6dd566d724e4cb43595a93a54f938ec6c92f2de259d9b937122fe11a510e1

  • Size

    76KB

  • MD5

    5b1eed83aef136ddc77516cadbb9be13

  • SHA1

    3b66d8b13a755865dadaba05ebd07d5c383c6861

  • SHA256

    daa6dd566d724e4cb43595a93a54f938ec6c92f2de259d9b937122fe11a510e1

  • SHA512

    e849872fad9fa7cdcd8eefec71368938bb4f6f36f22c0d794a81b2a8a2288f789f96ae2aa95c381f7e6adbc650dc4370c2b4f3f51d38a57ebd21695fbd728859

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z8A3Wz:c8y93KQjy7G55riF1cMo03N3y

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • daa6dd566d724e4cb43595a93a54f938ec6c92f2de259d9b937122fe11a510e1
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections