General

  • Target

    82b0daef15acfe4a9d2e28e73fe6160c83d6d176e54e3970d9ebcc7023b24f1cN

  • Size

    76KB

  • MD5

    78f4367d1e8e128f321cfe489e630390

  • SHA1

    c59632a94cf2202d4259da60b5dc893ff73c6f64

  • SHA256

    82b0daef15acfe4a9d2e28e73fe6160c83d6d176e54e3970d9ebcc7023b24f1c

  • SHA512

    5715848ed3574e18401b6fbd5c6fe221e99b9ee394a88a954d795d790bafc3747d69e811fc36646a4449d1dbd44f00ae8cd9686a7ca2d67fffad28fcd217b061

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZsCPQvpa:c8y93KQjy7G55riF1cMo03TOa

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 82b0daef15acfe4a9d2e28e73fe6160c83d6d176e54e3970d9ebcc7023b24f1cN
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections