General

  • Target

    3d8b16f0d4bc1a80a5afbb54f1f882ca5a24d1431b4c9b1c232ba97008aeec98N

  • Size

    76KB

  • MD5

    bd14d9fa1c099408d086446715e2dad0

  • SHA1

    57aea5e97be170e6d52d2e69438643dadb858832

  • SHA256

    3d8b16f0d4bc1a80a5afbb54f1f882ca5a24d1431b4c9b1c232ba97008aeec98

  • SHA512

    4a53e289f85117ee95e5b4601744c346051b8f6ed9729c1524795060681a16f860c53a412eef7504fdc7a17415c3a5eb711d510592cebfbcd89159f343d8eb96

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZGDcmhC:c8y93KQjy7G55riF1cMo03ADg

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d8b16f0d4bc1a80a5afbb54f1f882ca5a24d1431b4c9b1c232ba97008aeec98N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections