General

  • Target

    4840d35877647678e6f5bb0f1df6043599a9b5ece584cd69f6f531bc384cc08f

  • Size

    76KB

  • MD5

    fcb9c2601553d2f6bc83b25d3ef2baad

  • SHA1

    617fb117287d6e2f8c6153bfe3b1ddace6757644

  • SHA256

    4840d35877647678e6f5bb0f1df6043599a9b5ece584cd69f6f531bc384cc08f

  • SHA512

    7d761594092b1935ca64b54022faceadd8e5aabc395e53bd5e4769b4ee6ff28725638563f8daa63e5812e5fdfefb552362a16e071a55f708f0a05dc35de4c81b

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZqxM8V/k:c8y93KQjy7G55riF1cMo03R

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4840d35877647678e6f5bb0f1df6043599a9b5ece584cd69f6f531bc384cc08f
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections