General

  • Target

    c06e87f02505367d2edb7947fb2e99933a90b9879668d81ad8c9bc07901ffb01

  • Size

    76KB

  • MD5

    cad2a489c24d7d27f73c64dbf74af36b

  • SHA1

    1a21c988a55a053c22439b8d752fe6e581e4c470

  • SHA256

    c06e87f02505367d2edb7947fb2e99933a90b9879668d81ad8c9bc07901ffb01

  • SHA512

    998db34b868d0fec21b06a3919ac73c9df0627020cc8a4c7d95cbf5386086ae8bb52c7f0912dfd65cadb8aaf90e3aad3eb6db85606d482ceb24ac1900eb44dc9

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZgLLx3P9v/bn:c8y93KQjy7G55riF1cMo03aLLx3P9v/7

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c06e87f02505367d2edb7947fb2e99933a90b9879668d81ad8c9bc07901ffb01
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections