General

  • Target

    c486e2a51f1c229e5abb2d9a85777ce8ebd0aa79e933c51e80f8cd9f48d725ee

  • Size

    76KB

  • MD5

    560c018ece6fb89dba5f4faeba41870d

  • SHA1

    e058fa33404db50104061565c8f545fa05532944

  • SHA256

    c486e2a51f1c229e5abb2d9a85777ce8ebd0aa79e933c51e80f8cd9f48d725ee

  • SHA512

    39b5cbd98ea80201a3998837fd404a3327abec811df80c5445affd7f5341fe6a1b1825fdf892d71be11501b6bbe563cfd4a06cb1e4d2c6562c7ddbc7802cc40d

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZK92KhkFV4tg:c8y93KQjy7G55riF1cMo03okKhkFV4tg

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c486e2a51f1c229e5abb2d9a85777ce8ebd0aa79e933c51e80f8cd9f48d725ee
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections