General

  • Target

    0b759deea605c01dfc15f963321f9b30392186bfee91b5e7f0e75fdf540113f8

  • Size

    76KB

  • MD5

    aaf311a315cb372fb738858fbaed59bc

  • SHA1

    d02969a0ea38461ee3821965c86b828ef78c5a68

  • SHA256

    0b759deea605c01dfc15f963321f9b30392186bfee91b5e7f0e75fdf540113f8

  • SHA512

    b0886f0297debbca22444ac9a5d7784d4a48085b666056e0a6768545db8fde4bb6ff8edee698a548146680635f04017624074be07dacca8b5b8c61c7d490fd7f

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZJZ:c8y93KQjy7G55riF1cMo03bZ

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b759deea605c01dfc15f963321f9b30392186bfee91b5e7f0e75fdf540113f8
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections