General

  • Target

    b5541bfdec90b239e8b8e94cf190b08f28cf520d7c1f5b485ddb102a3f7f804f

  • Size

    76KB

  • MD5

    1e6fa3526dc834c00b36c2834b2b2ddc

  • SHA1

    db1acfdb5eeaf9c21b261a009ab96e24496d3f63

  • SHA256

    b5541bfdec90b239e8b8e94cf190b08f28cf520d7c1f5b485ddb102a3f7f804f

  • SHA512

    b0749d737ef58d7794982ae81c5e159230ed19bab0a0c1c7bc4d2c4417bc3f6db59255d28e6260ab51b79326965b54726023024b3bcd0acb68375b4ebce8607e

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZjGvM0L/dJ:c8y93KQjy7G55riF1cMo03NGvppJ

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5541bfdec90b239e8b8e94cf190b08f28cf520d7c1f5b485ddb102a3f7f804f
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections