General

  • Target

    b8390d642b2e8e4cdd67ad36ccad7a50N

  • Size

    76KB

  • MD5

    b8390d642b2e8e4cdd67ad36ccad7a50

  • SHA1

    f0ef4767125dbbab6997722b7a74e8f7c8be916e

  • SHA256

    002ccf858c4a43a0824ec460175119deb98c6f14941d436a8708cf62d28289b5

  • SHA512

    73348d95ff6fe8b6e2dc01d204647b0455ec3470acc707908962c5569a5ce9175f710b3986f07d12f3587bf68e2e4b0530ad8767b9d42eb20a70631bf53db7c4

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZaRNUYHE:c8y93KQjy7G55riF1cMo034HE

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b8390d642b2e8e4cdd67ad36ccad7a50N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections