General

  • Target

    014b31fb5c13c034ba98e7645ec0caa2d797f6f3a755bdb34b8ed28a96213a39

  • Size

    76KB

  • MD5

    e5fa0149bd4c09e28b209ac2856f98c9

  • SHA1

    e79030d96485a63fc7b33b2a38dfc6c154f63538

  • SHA256

    014b31fb5c13c034ba98e7645ec0caa2d797f6f3a755bdb34b8ed28a96213a39

  • SHA512

    77c12b6db496ce0edaa90d2608c7df867e2932334734db94c18faf72bb84d2e04caefdde148de3832926b46c21d74d424c29cf51bdb3cb32e68f72f873510832

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZC2Xs:c8y93KQjy7G55riF1cMo03nXs

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 014b31fb5c13c034ba98e7645ec0caa2d797f6f3a755bdb34b8ed28a96213a39
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections