General

  • Target

    5fa0ce5021842250ac3301ef1c23a539f8ea516a9d4d199f95829329b6516a9e

  • Size

    76KB

  • MD5

    75b61417cf3770d951a8f8f742f32907

  • SHA1

    ef289fcfabe5e113feedd9d29d57c374e429b182

  • SHA256

    5fa0ce5021842250ac3301ef1c23a539f8ea516a9d4d199f95829329b6516a9e

  • SHA512

    412d4299bf25c2a71cc362fcd579136dd0af113facd3c327b0f60b79fca8496fb7a40164c14145cf9f2f1b4c772cea71553091c8eb6f0eab061e6750cd103547

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zw2btlM/h5Wi:c8y93KQjy7G55riF1cMo03m2MWi

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fa0ce5021842250ac3301ef1c23a539f8ea516a9d4d199f95829329b6516a9e
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections