General

  • Target

    fbd743a17a7b357824d27d4a2d225e5592f169f54c299e582c3d976afe413b06

  • Size

    80KB

  • MD5

    aedfd27750266a64af84e27df66c01b2

  • SHA1

    9338667b6262d21c9cb9a7654cd6997267e1eaca

  • SHA256

    fbd743a17a7b357824d27d4a2d225e5592f169f54c299e582c3d976afe413b06

  • SHA512

    6d54eee4c122dcea1936f1bc524da91ddfe4b8f33d96c51aac8f934be5ea9a80a3e35d062e8e28dec59936aeaf0b8c91c2f3197463dcbfc8fdbe7cf2e9975d22

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEDvME:5dbwovEVyqgoZmZXWfIdQdRaefPM

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fbd743a17a7b357824d27d4a2d225e5592f169f54c299e582c3d976afe413b06
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections