General

  • Target

    04555cf872f007f91c9d439d8a26fc5e422f9b85f64ee8b12328b0dc89f39fb4

  • Size

    76KB

  • MD5

    eb87e8b05286bbe1f1ee6a49f7d6e80c

  • SHA1

    56bea8c785c53da1c6c3d46162080fefa6dfbd37

  • SHA256

    04555cf872f007f91c9d439d8a26fc5e422f9b85f64ee8b12328b0dc89f39fb4

  • SHA512

    acd2ace69e31eb820d81d4c74b95f87fa457fbb4fb3504daff62fa9df31f26b7d7ec47577d1725b56ac044e7bd0c2ef55ba1dbd73eb93438a12eb784db787ddd

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zb9eeZd:c8y93KQjy7G55riF1cMo03br

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04555cf872f007f91c9d439d8a26fc5e422f9b85f64ee8b12328b0dc89f39fb4
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections