General

  • Target

    728a429da4a626d7c1f5177d74d12507114e7b3ecb57e6f2fa0f9f4f79354e49

  • Size

    76KB

  • MD5

    21db4c9dcd181ec605fab1cac4b2ac01

  • SHA1

    46bee64d06d1d62787be2b27af25237563f4b63b

  • SHA256

    728a429da4a626d7c1f5177d74d12507114e7b3ecb57e6f2fa0f9f4f79354e49

  • SHA512

    ea8fd2a80147a227ee7bebb685706b0a62246f098f9cb64a2f709a698f33b5594e09bb69ee4cce2ffb8af6c139615380e6a080c14be0cbaa6c11eadcdf58230b

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZkucTCt:c8y93KQjy7G55riF1cMo03eucTS

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 728a429da4a626d7c1f5177d74d12507114e7b3ecb57e6f2fa0f9f4f79354e49
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections