General

  • Target

    878a4f6a331064ef63e913aad60eeccf120f6f9d8dfdf79869c2d0a59a0f7624

  • Size

    76KB

  • MD5

    bf05004cf9f100d24117ba0bd7b40daf

  • SHA1

    a6311f8f28f6533ab40aff95e0a3690573662de2

  • SHA256

    878a4f6a331064ef63e913aad60eeccf120f6f9d8dfdf79869c2d0a59a0f7624

  • SHA512

    993d416e007cb4de80928e47ce9b35c5b196df33e1474222998801666f039a5cb8e823742a4cf3b4f40de17b3c23400698bf4d2a166d9db5a815d38aef13c58f

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZVrXT:c8y93KQjy7G55riF1cMo037rj

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 878a4f6a331064ef63e913aad60eeccf120f6f9d8dfdf79869c2d0a59a0f7624
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections