General

  • Target

    d06d9b1d30ddf8f0efc4d8ef5ea8c857a71658d1ed14e3db21cd71b2c041d124

  • Size

    76KB

  • MD5

    a1fd81085dfe14392255d4fad4553f13

  • SHA1

    82b82f1f5a046f32c255fd7031774be15e5c72d0

  • SHA256

    d06d9b1d30ddf8f0efc4d8ef5ea8c857a71658d1ed14e3db21cd71b2c041d124

  • SHA512

    2b21f4adca1ac94432ec83a81dd3efcab4e5a3bae17ef27c703cc86a7f276cc0f25cc1dc3fc53315bd43ac03174a932171685327a42eafdaab2b412445aefb8d

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zn7pxY93zl4U:c8y93KQjy7G55riF1cMo03nxqDl4U

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d06d9b1d30ddf8f0efc4d8ef5ea8c857a71658d1ed14e3db21cd71b2c041d124
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections