Overview

overview

10

Static

static

10

398bbf5a78...92.dll

windows7-x64

8

398bbf5a78...92.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    398bbf5a789061bad3d7ef9a509729c2220a6f85a9a4b9f6b12e051898f7ba92.exe

  • Size

    76KB

  • MD5

    19bf57dc4ca7dfdc792d9dfe276cc4a3

  • SHA1

    ea1570add8b24b12c223baa68e8c608ae64bb98f

  • SHA256

    398bbf5a789061bad3d7ef9a509729c2220a6f85a9a4b9f6b12e051898f7ba92

  • SHA512

    edfc27a2373c7f982a1891b46ea11592448dc91dbfd0b7dbb3765027b2968bf377ba2246133ee13bbd23c95c9493bd7941d9b4b8b7305f57f3cc47029141673d

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z87H3R:c8y93KQjy7G55riF1cMo03S7Hh

Score
10/10
backdoorupxfloxif

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
    backdoor
  • Floxif family
    floxif
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 398bbf5a789061bad3d7ef9a509729c2220a6f85a9a4b9f6b12e051898f7ba92.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections