General

  • Target

    1c961ef95ea972db7c05a1d7d77abc43dea69a61a16d97532ebce3434e414a25

  • Size

    76KB

  • MD5

    63fb759b1583bbf43c37fbd579faaeb9

  • SHA1

    bf3d2da5b5e1508e2e193f1b72daaa44b4e6efcc

  • SHA256

    1c961ef95ea972db7c05a1d7d77abc43dea69a61a16d97532ebce3434e414a25

  • SHA512

    08072f6eddc37e0bd801fc20f254b1d3708402351d053202e235ac5a9cb9afa76033fef0649f69a80c14f20e5b545b2b153f7fee7010fb40747c7911c11ad87a

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z9OmYJfr6u:c8y93KQjy7G55riF1cMo03mHr6u

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c961ef95ea972db7c05a1d7d77abc43dea69a61a16d97532ebce3434e414a25
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections