General

  • Target

    371fb63d70a1f01c5c2a39ab37dc6eab694c294c835c0e0e3994aa7cab4c0418

  • Size

    76KB

  • MD5

    84434626392d4d81bacc6cb545253b72

  • SHA1

    53088146f9a6b4f10ff65c8adeccf36b7d001484

  • SHA256

    371fb63d70a1f01c5c2a39ab37dc6eab694c294c835c0e0e3994aa7cab4c0418

  • SHA512

    c394668117935c8fcda8f60fee74becabaf38148bbe56488ee62fa06f8dce176824c6c35039fd4f31221747a908ac776d6f78e74544e57bb521d356a7b48c679

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z/z:c8y93KQjy7G55riF1cMo03Rz

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 371fb63d70a1f01c5c2a39ab37dc6eab694c294c835c0e0e3994aa7cab4c0418
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections