General

  • Target

    21607d391a49dca7e0c11be86ea6a6ad9701d86dd0895b0d2eb607a500d971caN

  • Size

    76KB

  • MD5

    27195dfe87c7bfe0984e339b50d702b0

  • SHA1

    2a48dfbb86afa9c76643a5c562501625f4231506

  • SHA256

    21607d391a49dca7e0c11be86ea6a6ad9701d86dd0895b0d2eb607a500d971ca

  • SHA512

    2f55caa2c43cce501b70948b053e3c05b3c41e03ba7da90a49c8e87043a01c83427096948b5c0b242ee50baf97cfa0d57ee07fc2349aab1bcb89b8d59f882ec7

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z/Y:c8y93KQjy7G55riF1cMo03RY

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 21607d391a49dca7e0c11be86ea6a6ad9701d86dd0895b0d2eb607a500d971caN
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections