General

  • Target

    12e2de0a7211fea4496e44cb8aac62be7446b08e2da708da68b01f266aee5706N

  • Size

    80KB

  • MD5

    e5aeae89f7cd9534a8c8a6e8ee18aba0

  • SHA1

    d6d3d34f02376de5b22668fa81fe3e78b8026a0c

  • SHA256

    12e2de0a7211fea4496e44cb8aac62be7446b08e2da708da68b01f266aee5706

  • SHA512

    b044e01fd6a71f30d12046269a864a7dec577cf044e4ba8ea130bdbfa845641987e278daa9e3b7455ed01089cea77cac896fefc8bcc2f781a0d7a148c77a0a85

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxCDu3R+Wa:5dbwovEVyqgoZmZXWfIdQdRaeoka

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 12e2de0a7211fea4496e44cb8aac62be7446b08e2da708da68b01f266aee5706N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections