General

  • Target

    7211e1abe12322b8c079dfbc9082211cfb04bd6d647d5a928758bdc1ec41a061

  • Size

    76KB

  • MD5

    e45ac5fb8fb0ea8ebe1967da013944d6

  • SHA1

    349ff4c5b315f9f872e744efa54c5a87aca4b827

  • SHA256

    7211e1abe12322b8c079dfbc9082211cfb04bd6d647d5a928758bdc1ec41a061

  • SHA512

    8120e7cf0e93119b39d2bfb8144d450adceae8f99580139b8558dbf64d5e424a0312c75046da08d7909a36cdcbaadc7dbd7bc76d17836e2b8a3ee4ef4cec30ce

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z75yZmwQ/0Z:c8y93KQjy7G55riF1cMo03LVwQc

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7211e1abe12322b8c079dfbc9082211cfb04bd6d647d5a928758bdc1ec41a061
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections