General

  • Target

    56accc31794ea07b2d03dbc9cbb19a9e390abb7282395659cc1deaaebf5dad12N

  • Size

    76KB

  • MD5

    f80abe7ec449f9621961bc9bba278800

  • SHA1

    49868a58c153e08e16f8415b87aab2ebc1cde34c

  • SHA256

    56accc31794ea07b2d03dbc9cbb19a9e390abb7282395659cc1deaaebf5dad12

  • SHA512

    dc9e95323fd7a3138b9c06e3edaea6ec1827a2c268b4945d1bf3623e34692531407e3b5360a833e5e3cd40ee71e0f19bd8185dcb5f957c1a78fd4701f49d608e

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZxCLO+AeOp:c8y93KQjy7G55riF1cMo03vN+LO

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 56accc31794ea07b2d03dbc9cbb19a9e390abb7282395659cc1deaaebf5dad12N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections