Overview

overview

10

Static

static

10

329824a1f6...0N.dll

windows7-x64

8

329824a1f6...0N.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    329824a1f610cd9de02018c79fb41e30N.exe

  • Size

    76KB

  • MD5

    329824a1f610cd9de02018c79fb41e30

  • SHA1

    4a320be56ab6be4de498e218bb52d89b1fe9fc3c

  • SHA256

    7fe119c7ddc38f6357f5a5541c573948574ffad377d420ea1167a02b746e5914

  • SHA512

    541f453f99c266db654cff511978c9fee35eee2e3bf53be0827d04d5881a131b14b992b1f1ffcf67c711b0ee8f14f82638a79c60e714048c92a5d64c830fb118

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZeQwN:c8y93KQjy7G55riF1cMo0389

Score
10/10
backdoorupxfloxif

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
    backdoor
  • Floxif family
    floxif
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 329824a1f610cd9de02018c79fb41e30N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections