General

  • Target

    4fa07c5bb1695ee4426d88d041d139d648d76f4d4e0c20b85b7291f33b8a9757

  • Size

    76KB

  • MD5

    748e2040912b2bdbdfbeb052488edddb

  • SHA1

    f8b52eaf95729ac0d3e766780f3576c1e3b1db16

  • SHA256

    4fa07c5bb1695ee4426d88d041d139d648d76f4d4e0c20b85b7291f33b8a9757

  • SHA512

    8e15a824d637eb0ee28053d8b6b8e5781b578bdf3c0bf99e9e42e618b135b595a9277eaf44ff553dbbe43bd288e482066bc60b6875d225004ea414d029d426c2

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z6FcMCsnMI:c8y93KQjy7G55riF1cMo03nMrMI

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4fa07c5bb1695ee4426d88d041d139d648d76f4d4e0c20b85b7291f33b8a9757
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections