General

  • Target

    7a77dec7a2a6cd2769e82ea0fd053881853c0f7612e605c41758952629740c19

  • Size

    80KB

  • MD5

    b07174fc391992f4bd743300a0fe745b

  • SHA1

    8abfbd6137e367e13bc1a48210188dfbb7d46604

  • SHA256

    7a77dec7a2a6cd2769e82ea0fd053881853c0f7612e605c41758952629740c19

  • SHA512

    028cfc33a66ea62cf9c3b7731146e97f7042f20224bed9a922ef97b5546d4a2f6f06a62f184da51c042d462fcaa5085de0defc3dea47e3efda6dd60e83d60ea7

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEMLS:5dbwovEVyqgoZmZXWfIdQdRaefPhLS

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7a77dec7a2a6cd2769e82ea0fd053881853c0f7612e605c41758952629740c19
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections