General

  • Target

    6d94dc01c6f967cf88b303112d83a9c0N

  • Size

    80KB

  • MD5

    6d94dc01c6f967cf88b303112d83a9c0

  • SHA1

    70dafe691d3cca6c8b227ce974e4ab87c98de2de

  • SHA256

    a656aa515b987f663a099eb02e8c056d337466aab9e085aac5786b5d0dab27e3

  • SHA512

    98a00e206ffd4a10e7f9add55fee40854dbb8e6b658a768f0a4c4b5e39a8cf97bcf19d5f81566ff9e53acb8d8fc2fd68017c99534a841b555f12392cb7663b3c

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPECuTtUTdURaQ7:5dbwovEVyqgoZmZXWfIdQdRaefPjupUY

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d94dc01c6f967cf88b303112d83a9c0N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections