General

  • Target

    4b3de6445299b709669425c550c95945b9622d3cc8f085444588b27a7df50697

  • Size

    76KB

  • MD5

    2d061184f159236eb694fb21bb6f198c

  • SHA1

    6fc332b36f54823b55fd707b8bedf7bd8f315ffd

  • SHA256

    4b3de6445299b709669425c550c95945b9622d3cc8f085444588b27a7df50697

  • SHA512

    2789d962e08bed15966b9b768b92d3bd596abbc4fcd24aeec4879570b06732e9e833c1fbf16d74617bedb33c52da53d1d64b9a62c8bb4c380ecbe74e9f1ac442

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z6hZyw0khTmi:c8y93KQjy7G55riF1cMo03S

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b3de6445299b709669425c550c95945b9622d3cc8f085444588b27a7df50697
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections