General

  • Target

    e8449e1b9fc71642072d240c9b92e5397c783482d6d01ade9e3b1dfa1588ce99

  • Size

    76KB

  • MD5

    5f0bf077e4f1b546b43015f27b1a2fb6

  • SHA1

    2805f11b5d55d31a6cc6dd472560acb104514774

  • SHA256

    e8449e1b9fc71642072d240c9b92e5397c783482d6d01ade9e3b1dfa1588ce99

  • SHA512

    68f006385053c8fd8d3a429c25e56145f530bc857ad4d82ec63c806dad0fbbb3560d14220ed4e3db2cffcc585d3fbb29d2d10042dd8017a016cd93811f82dd73

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZwGb:c8y93KQjy7G55riF1cMo03GGb

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e8449e1b9fc71642072d240c9b92e5397c783482d6d01ade9e3b1dfa1588ce99
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections