General

  • Target

    5ee867baceaee88df23e4cfcc70584db4aa6d13f7feb648ff202b9d58e30d11dN

  • Size

    76KB

  • MD5

    24a51f3f55856127964f223754307350

  • SHA1

    52aee84630704ae1190aaec4a3e675a18bb8c04e

  • SHA256

    5ee867baceaee88df23e4cfcc70584db4aa6d13f7feb648ff202b9d58e30d11d

  • SHA512

    c61122e90a74790ee05c448e4351ab1bb1b98f9e5d5de6d084b9d369e1a18a1624aea37d300650a18dd8524e644aee2b68dc4a6294d477b73153e1f3b4ca4d77

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZjTy3F7s:c8y93KQjy7G55riF1cMo03NTy3F7s

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ee867baceaee88df23e4cfcc70584db4aa6d13f7feb648ff202b9d58e30d11dN
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections