General

  • Target

    04663b7c6af780bfb9e13938dd019f418c22b686f8b4bba7a184ec41fab7f31d

  • Size

    76KB

  • MD5

    2a88b49346a887a4ebf39c13cdbb3d11

  • SHA1

    d337a96f6c786b34766c0378fdcc7b6ef0ce95bb

  • SHA256

    04663b7c6af780bfb9e13938dd019f418c22b686f8b4bba7a184ec41fab7f31d

  • SHA512

    75f6fdff5158ac246869c93431518ddbc75a659151eed24b574103c40fae0c906dd2d21126eea0dcd729d71f2cdc08f9fa58087948b5996efbe47d02d235da3f

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZWcwXRh:c8y93KQjy7G55riF1cMo03gDhh

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04663b7c6af780bfb9e13938dd019f418c22b686f8b4bba7a184ec41fab7f31d
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections