General

  • Target

    0f3e220b9e14f239155f8a4dc82928a96f4b54686b861c12fbd5dca089c15373

  • Size

    76KB

  • MD5

    094dd1510f3199dd9f5c0be1e371f6ef

  • SHA1

    5cf9591db3f1f0680551a50912abc4f9b0f73b08

  • SHA256

    0f3e220b9e14f239155f8a4dc82928a96f4b54686b861c12fbd5dca089c15373

  • SHA512

    216f5eaec67cb116c9b2b7d0f9145a46255f2260c8beca09f89270d10052f02c918d55472e6d65c82b8fe3bbb9f3f747976833d879acf47eb4e5b9367c7a72db

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZrFACEHXQRiSmvp+T:c8y93KQjy7G55riF1cMo03BFACEHXQRj

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f3e220b9e14f239155f8a4dc82928a96f4b54686b861c12fbd5dca089c15373
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections