General

  • Target

    9a350ff0359b3e2e772602db76cbc1e0d6d4fa5fd5cac23d4cdd5230d4ab9ef3

  • Size

    76KB

  • MD5

    168d4a73b406418b25556a420ebaf6d1

  • SHA1

    1e8b54b359e584f294c645c9928e8bea517e1a06

  • SHA256

    9a350ff0359b3e2e772602db76cbc1e0d6d4fa5fd5cac23d4cdd5230d4ab9ef3

  • SHA512

    a820ca2cd6c0a9aa17f5ec992f6c6c0383aa75c9a92c9cd558013878dd31967ad5ae397605345df54daee94c219a962f4d70c7a39202723ce9c2510ed93fc18f

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZBB2:c8y93KQjy7G55riF1cMo03nw

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a350ff0359b3e2e772602db76cbc1e0d6d4fa5fd5cac23d4cdd5230d4ab9ef3
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections