General

  • Target

    4224eadf7cce5b055fa360c63b7e53dd34a601ec87341bbc3fc6a81a326a2080

  • Size

    76KB

  • MD5

    fd99cdd09669b6565de08be491212bf7

  • SHA1

    f32aadc1a8fc972ddcce3aafdf16ba14f6cc83fc

  • SHA256

    4224eadf7cce5b055fa360c63b7e53dd34a601ec87341bbc3fc6a81a326a2080

  • SHA512

    ab49d400fb4ee566e1d563dc6033a3b5a5a305f48aee86cc055337417aecdc434ab297eb521454c97c2fa1feff1ba06a45ca04f4f8e3f968782653a2e90697ac

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZJhjlGEuCM2:c8y93KQjy7G55riF1cMo03LhjlGEuCM2

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4224eadf7cce5b055fa360c63b7e53dd34a601ec87341bbc3fc6a81a326a2080
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections