General

  • Target

    12f72e6ba4108b1e9e421e69b3b10c19f340c9c0605c2773dc9618f12a14a8a3

  • Size

    76KB

  • MD5

    89e25c406f3119bdd998649c90546ec7

  • SHA1

    a14268a59f04ad4b825831868ff67c63b9dcbc9f

  • SHA256

    12f72e6ba4108b1e9e421e69b3b10c19f340c9c0605c2773dc9618f12a14a8a3

  • SHA512

    dabd59a333f5638524014ae8e7a88404612e400dc13a0573c069c845989b1aff45e5cc48c465f77124f689ac843c6f72d3b54f824e884f8e95e7ea0caccd52fd

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZCUg:c8y93KQjy7G55riF1cMo03AUg

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 12f72e6ba4108b1e9e421e69b3b10c19f340c9c0605c2773dc9618f12a14a8a3
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections