General

  • Target

    68fbb05e1d06642a41255b41525350facfbc9037a9e7f7d140f17774ad70028eN

  • Size

    76KB

  • MD5

    901ac41790804b39e49efcd4b21e42a0

  • SHA1

    fa232531b3390552b011d61f50f686b45526b18d

  • SHA256

    68fbb05e1d06642a41255b41525350facfbc9037a9e7f7d140f17774ad70028e

  • SHA512

    43d9610f05d80c7332691229a6b04f3a7550d6c8fc4f533ae64b3927843b6d9fb4795ea1341ef49e3ebeac694590b3015533d3636ac21853dba746c720099ecb

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z0aPnp:c8y93KQjy7G55riF1cMo03LPp

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 68fbb05e1d06642a41255b41525350facfbc9037a9e7f7d140f17774ad70028eN
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections