General

  • Target

    7fb9a9e2be9ebc23d8f1db49fa1add2ec94da6d1bfd8cebd5655bc5be9cd26de

  • Size

    76KB

  • MD5

    7a02d3748e499367ee10b2adc860ea7a

  • SHA1

    5c164d672d24ef9d7426f161bd61c8377fd175e8

  • SHA256

    7fb9a9e2be9ebc23d8f1db49fa1add2ec94da6d1bfd8cebd5655bc5be9cd26de

  • SHA512

    98246fa5173e96f1658641d3a72419aea184c045aba282beafd51f061861941019c7f3ff9afd552df0a39a8a1f0097e0851184f9f0e4484ba8d821259f21805e

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZmPaHZAHYq:c8y93KQjy7G55riF1cMo034PaHZMYq

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7fb9a9e2be9ebc23d8f1db49fa1add2ec94da6d1bfd8cebd5655bc5be9cd26de
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections