General

  • Target

    8485b2830467b171c15bb4460bd639d5d9d31a62f4dfcac61f6f84c4ec6f9ccd

  • Size

    80KB

  • MD5

    e1b63862c0fbc7cf6c1624fc672879ab

  • SHA1

    6b8137323f0a04dab3b1e6ea573188ed5c8c5e88

  • SHA256

    8485b2830467b171c15bb4460bd639d5d9d31a62f4dfcac61f6f84c4ec6f9ccd

  • SHA512

    8018c6575eabf58e1ea96cc6681ad532f51b91763cd21d78648067179c960da11ee5c1f5fec5a2feaccd730ec739c07b1ec5de7cbe63c5d3f63144ca80258bbb

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEXM:5dbwovEVyqgoZmZXWfIdQdRaefPqM

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8485b2830467b171c15bb4460bd639d5d9d31a62f4dfcac61f6f84c4ec6f9ccd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections