General

  • Target

    a6f30fc6feb72fa2c9e85438b0a4a2378d8e92d1a4233dc6c2404d5a4162730d

  • Size

    76KB

  • MD5

    0f3440597923833e2c7049586c73ea3d

  • SHA1

    f93abc8d66412916130da9486c7fc4fdf3503c0b

  • SHA256

    a6f30fc6feb72fa2c9e85438b0a4a2378d8e92d1a4233dc6c2404d5a4162730d

  • SHA512

    5bfebf08ad48b277fc5ffacd387f748a70d06b8537c38a7c43df4841f079166b1a9a9df0ac490e12532187881428284f1dd8c8a8279929ceff3d47487a26be6c

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZL4h:c8y93KQjy7G55riF1cMo03ah

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a6f30fc6feb72fa2c9e85438b0a4a2378d8e92d1a4233dc6c2404d5a4162730d
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections