General

  • Target

    ff436720e96cf2ee5d813e532eb5fd23b4e3ad9f4b54f22b499e00506c35036c

  • Size

    76KB

  • MD5

    d9786d0121cca13e07294ce288074a48

  • SHA1

    257010d03b8f964d16feb47c450f99680433c50a

  • SHA256

    ff436720e96cf2ee5d813e532eb5fd23b4e3ad9f4b54f22b499e00506c35036c

  • SHA512

    41fa4dd7063fed81f9f43ee15145c1ff881d4fb3cbd546fbd99f9ee4ed5e1a3fe66242d2321bb640903a84ef2fc19894096611775bed38a14bc9976dfecfa1ea

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z0KK6nTCJ6FM:c8y93KQjy7G55riF1cMo03qK3y6i

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ff436720e96cf2ee5d813e532eb5fd23b4e3ad9f4b54f22b499e00506c35036c
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections