General

  • Target

    02d9d5172bd9f622fc2e25315dd03b90ae1bc490e4277e5aa3c74e93289aec59

  • Size

    76KB

  • MD5

    3abf8c99f6f9cbebdf0a89b6053f6d4b

  • SHA1

    6135d79f2d63b27531a9b1c26865c4d377d2b261

  • SHA256

    02d9d5172bd9f622fc2e25315dd03b90ae1bc490e4277e5aa3c74e93289aec59

  • SHA512

    b13eb754426453ddfce6d6db72324dbd306f850a62b5b013cc942a038401e302ce06b876a95f7aa149c4f72141e4e538875b2b5e9b5f54f3849bcc43c5bcc0e4

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZuPr:c8y93KQjy7G55riF1cMo03ur

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 02d9d5172bd9f622fc2e25315dd03b90ae1bc490e4277e5aa3c74e93289aec59
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections