General

  • Target

    beb9c4d83530e4179b6605b30a6170f43bae57ea46c40ceb30168c0a1cf379a4

  • Size

    80KB

  • MD5

    bf46bab1022c64584244ca269610594e

  • SHA1

    b1d77fc357822d5b48c1298a4abe069ac5faa3f6

  • SHA256

    beb9c4d83530e4179b6605b30a6170f43bae57ea46c40ceb30168c0a1cf379a4

  • SHA512

    ac991930446ee369f91f886508ed950ca941d6a1eb4a256a7dfa79ca90000aae8453c4c3e8baa83ae9d2f550ce360b79c03cb054c7745f537302cf299a1da9ae

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEUHk9aJn:5dbwovEVyqgoZmZXWfIdQdRaefPz

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • beb9c4d83530e4179b6605b30a6170f43bae57ea46c40ceb30168c0a1cf379a4
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections