General

  • Target

    96795604f8d92f49b8f6aa00848492ba7dae9529531a9da48f15db1c3fec54b5

  • Size

    76KB

  • MD5

    c3f7f2941b6aea1dd6cec8b41b43f9ce

  • SHA1

    eea049cc0fffad3b414362cf53b4af62f1eae2c0

  • SHA256

    96795604f8d92f49b8f6aa00848492ba7dae9529531a9da48f15db1c3fec54b5

  • SHA512

    b77b8fbbafa6c547f0de02b30821cac2d2aa7046c18523335c87ff58d97e8f7e69e62c7caf7624e4a7b1618860bcba811571398b9d7d24363e4d769a40ca8a44

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zc35LYRT:c8y93KQjy7G55riF1cMo036Ls

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 96795604f8d92f49b8f6aa00848492ba7dae9529531a9da48f15db1c3fec54b5
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections