General

  • Target

    e70f0949077943f1b7f238ca7fe07aa582456653f29c3535a97ff41ec0dc9d5f

  • Size

    76KB

  • MD5

    ca5574260ac3eb561497c7fbb5aef0fb

  • SHA1

    775b081af5aa80e7205c03497f50ecfb4acab7bf

  • SHA256

    e70f0949077943f1b7f238ca7fe07aa582456653f29c3535a97ff41ec0dc9d5f

  • SHA512

    5abc8c3e485efb6e36d18ba1bb956495c03dd6f47eb4ff605a62f7f44304ed32ac7004157f6860e124f42b73370a9265ce320da83d90bcb9359b33cf083a977c

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZIeEB:c8y93KQjy7G55riF1cMo03QB

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e70f0949077943f1b7f238ca7fe07aa582456653f29c3535a97ff41ec0dc9d5f
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections