General

  • Target

    b0348b81646137b1a7cf5a4a04a46623f922c8ffc0a74bd49c8707cde142f923

  • Size

    76KB

  • MD5

    1cc9bff88ff82944717c1227c427eead

  • SHA1

    95c99db1fb4b778a51a4f1c49897a453d428b094

  • SHA256

    b0348b81646137b1a7cf5a4a04a46623f922c8ffc0a74bd49c8707cde142f923

  • SHA512

    684edbb4876ab15dc75faf1b93b35f3e3bd2ba340df2a2419d1b2ea139523aa6023f297c1e47b88ee5a6c7f2b10c9710a9f5456baf8255cf12c7a6046435c2ca

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z3kSSMg4Huv4+2:c8y93KQjy7G55riF1cMo03SMgvN2

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b0348b81646137b1a7cf5a4a04a46623f922c8ffc0a74bd49c8707cde142f923
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections