General

  • Target

    07613e09d59817fbe73fe750402d49b7d3bc5bd3b69f631d1d44a4cf061f58a0

  • Size

    76KB

  • MD5

    e8a70b869789d99b03ceb9f3efa295a8

  • SHA1

    f4d1e0f5a6241446eb04d28a1b4facd03278047e

  • SHA256

    07613e09d59817fbe73fe750402d49b7d3bc5bd3b69f631d1d44a4cf061f58a0

  • SHA512

    2bf466d4af0689cf675e29ccb384978aa0372940b188b4e72e8977ae0774cfb17b8767d290ec238b4e55afb3d8dbb8420a264fc5516d651292115fbfa08ce085

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZChDo:c8y93KQjy7G55riF1cMo03cy

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 07613e09d59817fbe73fe750402d49b7d3bc5bd3b69f631d1d44a4cf061f58a0
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections