Overview

overview

10

Static

static

10

0476a15021...bN.dll

windows7-x64

5

0476a15021...bN.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0476a150214207c0a78a2dde516888cc96b7648fb84efe654dc0d6b49f08152bN.exe

  • Size

    76KB

  • MD5

    fbd99507f7dbab980ec067c880068830

  • SHA1

    be353438400d8d9e08fa3f9dc964c2ac996e966a

  • SHA256

    0476a150214207c0a78a2dde516888cc96b7648fb84efe654dc0d6b49f08152b

  • SHA512

    45cc0b9672edae20d8709bf54150c10640e596db94644e9cde9fd05ef818c3c827f772117ee2831cbc786e8b04eb873dac40f7bc60634f9e8538a17a0205400c

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZmuTFp+Q81:c8y93KQjy7G55riF1cMo034Q81

Score
10/10
backdoorupxfloxif

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
    backdoor
  • Floxif family
    floxif
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0476a150214207c0a78a2dde516888cc96b7648fb84efe654dc0d6b49f08152bN.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections