General

  • Target

    b0ed7a2c8b0ab988ed7078130a6d94956ac809d675f4f195f93be159dde3fccf

  • Size

    76KB

  • MD5

    fc31b31d6a11f7b5f1454ca182a7e9bd

  • SHA1

    abf5c58441b2be77ab31d504fc3b6368092a6fb5

  • SHA256

    b0ed7a2c8b0ab988ed7078130a6d94956ac809d675f4f195f93be159dde3fccf

  • SHA512

    1cfcbf58545cdf489e9b8b6610636fd6e64ce7c488e85b917e80677e7bdb2ea27e0b4e6957cfaba99fa21a6e5428403a287adbc120f3a49d011e5e63be8ecc15

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZqFURcdNnQx:c8y93KQjy7G55riF1cMo03mLO

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b0ed7a2c8b0ab988ed7078130a6d94956ac809d675f4f195f93be159dde3fccf
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections