Overview

overview

10

Static

static

10

cff8deaaf9...86.dll

windows7-x64

7

cff8deaaf9...86.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cff8deaaf9d1a1331b0b09a3aac1bd323154c1e7a3ee82187d567c3868fa2486

  • Size

    76KB

  • MD5

    a2f919e57bcf9112b70740e453410c13

  • SHA1

    67f31abcf8b4446e8b342f36e8f8ac66107b8324

  • SHA256

    cff8deaaf9d1a1331b0b09a3aac1bd323154c1e7a3ee82187d567c3868fa2486

  • SHA512

    3ec5778b7850bc40166879c8c4f258dbab83e6a4eb9a3ce46b5625dfe34e75712e709e0387377bd690a2b0348f7833034b85f820aa201fa77001db04eb739972

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZqVYUZ:c8y93KQjy7G55riF1cMo03mDZ

Score
10/10
backdoorupxfloxif

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
    backdoor
  • Floxif family
    floxif
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cff8deaaf9d1a1331b0b09a3aac1bd323154c1e7a3ee82187d567c3868fa2486
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections