General

  • Target

    5f1bdc14ca8d568993c8786c8b259fa57921beee87189ccc016adcf158066305

  • Size

    80KB

  • MD5

    d4fed2e5cebf432b62ea20a76ca31624

  • SHA1

    e22ca4f896d0196295f422202bf061c5df817d57

  • SHA256

    5f1bdc14ca8d568993c8786c8b259fa57921beee87189ccc016adcf158066305

  • SHA512

    0ac0ddde049f9235fdad2c4f32b6750ab377d3b3efb9aa20c705d35ceb8cb9c08872bca312880359da69e33fd1f7e8b250b605ed6e2a8e5f536c7a071bf9f14e

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEz1:5dbwovEVyqgoZmZXWfIdQdRaefPe

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f1bdc14ca8d568993c8786c8b259fa57921beee87189ccc016adcf158066305
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections