General

  • Target

    fed16c4bd4133688d6339ffddc3fb989d0fad189637f2fa5140aae65cc6cd5ee

  • Size

    76KB

  • MD5

    fe76cb18217484bf3d2aad22e5d6a595

  • SHA1

    12c1166a434395dd9fdf59e4882fb0112e7708ea

  • SHA256

    fed16c4bd4133688d6339ffddc3fb989d0fad189637f2fa5140aae65cc6cd5ee

  • SHA512

    9e57b6b25da30ec96e83fd1c4878fa57e296f94fbe77d8375e1505867dec0eac62b67b2317c32ca984d4be12ddd18f55a899a03c2ba91d8674f3bff05c070eca

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZJ/8Ijz2v:c8y93KQjy7G55riF1cMo03H/8eav

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fed16c4bd4133688d6339ffddc3fb989d0fad189637f2fa5140aae65cc6cd5ee
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections