General

  • Target

    aba6812c7e22e2f3cf7f428ea5614fb0N

  • Size

    76KB

  • MD5

    aba6812c7e22e2f3cf7f428ea5614fb0

  • SHA1

    b52e6e1b6e2443a0bd0fd6d4da2d846b40a8737c

  • SHA256

    fcde40673051b87da4df2e391d9a99738a2a0e963d4bb188cd537520eb30bbc1

  • SHA512

    bc076775ea5ea21de121151c4e71dc104e688bee6ff32195ef162890ebb81953dc0c4d5c4a136d214ccea3c28db3ca814f4070b33c2b1283e15ad76522233221

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZnlnKeXCWH4:c8y93KQjy7G55riF1cMo03HKeXCWY

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • aba6812c7e22e2f3cf7f428ea5614fb0N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections