General

  • Target

    fa6a6e24ccde3655c323ee94c7729fbd7f3ff66220880e31cf4982d67e61b666

  • Size

    76KB

  • MD5

    f9cdc7d4a983379f5efde149a462b3d9

  • SHA1

    49981c3e024a7bedecb9aaa0a0d286c8486ce1f3

  • SHA256

    fa6a6e24ccde3655c323ee94c7729fbd7f3ff66220880e31cf4982d67e61b666

  • SHA512

    7775e1c2805e568cd149a777ea0c43762065c04fca672a21c00beb399ca80633132358615edac7d26084a850637d0c006f38f2fa102308f0b73bff99440100ba

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZRe0ZyBW/X:c8y93KQjy7G55riF1cMo03HZqQ

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa6a6e24ccde3655c323ee94c7729fbd7f3ff66220880e31cf4982d67e61b666
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections