General

  • Target

    2645d9eda8e00105bc65dc4b0aa03b64a4b0838a2fd2404b03f41ce800522c81N

  • Size

    80KB

  • MD5

    ca0904c7c9c8f260335223101a2a9f80

  • SHA1

    975429eefe193af74517cdfa44b6c8ab397fc08d

  • SHA256

    2645d9eda8e00105bc65dc4b0aa03b64a4b0838a2fd2404b03f41ce800522c81

  • SHA512

    b3a6df2c89593ea100f1d8ab2b45c1fba5df7bcf85a18fdd8e99d5255b0e5329ee3a3e4b5437aef615270f9cae0d731fbaf0641653e70ebf59157720f48e53d3

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEYgXfGhoxd:5dbwovEVyqgoZmZXWfIdQdRaefPtgXf/

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2645d9eda8e00105bc65dc4b0aa03b64a4b0838a2fd2404b03f41ce800522c81N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections