Overview

overview

10

Static

static

10

559d94a6eb...f5.dll

windows7-x64

7

559d94a6eb...f5.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    559d94a6eb1d952ba4d03412765ac3c21212c8622a00324a36cbb458a3493bf5

  • Size

    76KB

  • MD5

    ca5fb23ad0cfa04833a522be732956a9

  • SHA1

    302c3c0aa52f551d3deec93c61d9f04383dd0e0b

  • SHA256

    559d94a6eb1d952ba4d03412765ac3c21212c8622a00324a36cbb458a3493bf5

  • SHA512

    8d5b139a662c40341e3ee5a9ee12f1e3e2e6958f8a07aeb5df7fc975fc0e2b98ac36cd0c1b815ae9c29d364f9bbf3c2365bdbe93e95015b065ea2d70479a9340

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZjITJ/wf:c8y93KQjy7G55riF1cMo03BIhwf

Score
10/10
backdoorupxfloxif

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
    backdoor
  • Floxif family
    floxif
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 559d94a6eb1d952ba4d03412765ac3c21212c8622a00324a36cbb458a3493bf5
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections