General

  • Target

    065c44dc30857b5ba0e8bc8bc70d2f5cc2eb087aba8a9f13b61049b55b6ddaa6N

  • Size

    76KB

  • MD5

    bfc377851ac7f369fc99b4dbb1d5b170

  • SHA1

    235603addaf22cfa2fa9868e205f543716e1ff7a

  • SHA256

    065c44dc30857b5ba0e8bc8bc70d2f5cc2eb087aba8a9f13b61049b55b6ddaa6

  • SHA512

    986c0f64998ed614f3091100f3ebd119e1850a0df7f56da0c11ca8bc90db34d9d7dffebbc2e595e73f34ccadc0987a89524860098b6f5e32e90b81cd2f8debfa

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZODZ6BuSz:c8y93KQjy7G55riF1cMo03sDZ6Br

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 065c44dc30857b5ba0e8bc8bc70d2f5cc2eb087aba8a9f13b61049b55b6ddaa6N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections