General

  • Target

    56cfe07b28ac307b52062149dd710158bc354c8f49da5e36c0368f84fc020e72

  • Size

    76KB

  • MD5

    1b0809e68b4d438551b41534f371d50f

  • SHA1

    9742d44620508bce3c458b53e49176a0fcb0c31f

  • SHA256

    56cfe07b28ac307b52062149dd710158bc354c8f49da5e36c0368f84fc020e72

  • SHA512

    6fc9310f7dc2b29c1c6987735c4dc4140c1755e5e94e115978bb0de0d2270a556468bb45386314295983cea02665f5e79690015068611d41fca898421cd4fe94

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z3xOICanHunk:c8y93KQjy7G55riF1cMo035xOICanz

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 56cfe07b28ac307b52062149dd710158bc354c8f49da5e36c0368f84fc020e72
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections