General

  • Target

    3ecb8d50bbc34dcdf97c3c846094fdfa267c2992cfa775e192e064d26eaa85bbN

  • Size

    76KB

  • MD5

    dbf95be5d86965339ae6f98dc1418b30

  • SHA1

    7addad547251712a65d505ce88c0fa221f8d853c

  • SHA256

    3ecb8d50bbc34dcdf97c3c846094fdfa267c2992cfa775e192e064d26eaa85bb

  • SHA512

    493f54815817b24bfe7ebbc62cc80b27eed1d6bf1bebf8d284730502e712afe5e48bbdbaa836f23672981f72569c03ff927f4f08edcde04b5d131d747245d290

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZR7X95D:c8y93KQjy7G55riF1cMo03HJx

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ecb8d50bbc34dcdf97c3c846094fdfa267c2992cfa775e192e064d26eaa85bbN
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections