General

  • Target

    39dadf29a036fa4ca79ef4eedc9ccb20N

  • Size

    76KB

  • MD5

    39dadf29a036fa4ca79ef4eedc9ccb20

  • SHA1

    488cc7f526841560cdf3737ec41d72d8d67c671d

  • SHA256

    5799e4d7e3d6cda9bb591f78608a56cd1cc022511a7bed1e290807bae0169d9c

  • SHA512

    e2fd5b4e3b7fef715530099a601683f08f2d3cbb6e85a60f15abc3821d450b4ed59d248539f1a7e2129602f02578526dc4b98b1c5b132a650c8fa2ed16a827c4

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zafvct:c8y93KQjy7G55riF1cMo03Wvct

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 39dadf29a036fa4ca79ef4eedc9ccb20N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections