General

  • Target

    f1f53b86fe4d6b4a88c5c034ddb0ff67b7b6213a4dddc651f37482c2e7e96fbb

  • Size

    76KB

  • MD5

    e3915f12e2707ec01a2209a989f28b1b

  • SHA1

    13e86f923e9ade690c590431a439f4bac46f5980

  • SHA256

    f1f53b86fe4d6b4a88c5c034ddb0ff67b7b6213a4dddc651f37482c2e7e96fbb

  • SHA512

    71ad2101c0b49c852cb54c8a1b0aef27b6a6e1936777aa45adb82e9d00bb316e51710bbeb1a5c8bca57cbf37f36f519477dfd7ad6056aa890eb74af17d1866a0

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZtdzCEFQ4gwMS6:c8y93KQjy7G55riF1cMo03zdE4gwd6

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f1f53b86fe4d6b4a88c5c034ddb0ff67b7b6213a4dddc651f37482c2e7e96fbb
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections