General

  • Target

    72866a0f93e281373385e44e2047064c55dae4991c04d973b86beee6b1f24865

  • Size

    80KB

  • MD5

    2279861fb0e91f69c6b9b66df611f4ea

  • SHA1

    84b24b90cbde33ff884456bb00d0dccf0cc67a0d

  • SHA256

    72866a0f93e281373385e44e2047064c55dae4991c04d973b86beee6b1f24865

  • SHA512

    db4eeab1f2cc90e86b1a4038f716056879458d40533f0b6c96085d55bca50dbd47177756f78297a8693952af2dbca79095beacf7ef54f4e3f87f3a3f1f90a8e1

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEOAeIc5:5dbwovEVyqgoZmZXWfIdQdRaefP5AvW

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 72866a0f93e281373385e44e2047064c55dae4991c04d973b86beee6b1f24865
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections