Static task
static1
Behavioral task
behavioral1
Sample
flips-linux
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral2
Sample
flips.exe
Resource
win7-20221111-en
Behavioral task
behavioral3
Sample
flips.exe
Resource
win10v2004-20220812-en
General
-
Target
floating131.zip
-
Size
154KB
-
MD5
7b78640e895bdf50cb9c23cf306ba184
-
SHA1
676a4c63cbbb901e5f39c7be3981473295ba12a0
-
SHA256
1e28e9217084b81ba53d51c4b5d29179a6c1f9d2e0f900c08c55df1666298c80
-
SHA512
40c1e9e2c78ef8f30e1a146dd1b1bd1c49addb97c1bc55bd1b1c964f0ee78d2626704ff706c1eb60fc5cd20ffdb70b5188ff8ac6cf34193ef73f2ba48241deb2
-
SSDEEP
3072:+UhrTY2+0T9yTgqXrdSpr6obXsnnx0sQhCkIg4jUvihaFtbv:+0rTYy9agqp0rbbcx0sQhB42Rv
Malware Config
Signatures
Files
-
floating131.zip.zip
-
boring.zip.zip
-
license-gpl.txt
-
flips-linux.elf linux x64
-
flips.exe.exe windows x86
b9cdcfe77b5434472f10d006f2a19603
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
comctl32
InitCommonControlsEx
comdlg32
GetOpenFileNameW
GetSaveFileNameW
gdi32
CreateFontA
GetStockObject
SelectObject
SetBkColor
kernel32
AttachConsole
CloseHandle
CreateFileW
CreateProcessW
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetFileType
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
ReadFile
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WriteFile
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
_vsnwprintf
_wcsdup
_wcsicmp
abort
calloc
exit
fflush
fprintf
fputs
free
freopen
fwrite
malloc
memcmp
memcpy
memmove
memset
putchar
puts
realloc
signal
strlen
strncmp
vfprintf
wcscat
wcschr
wcscmp
wcscpy
wcslen
wcsncmp
wcsrchr
wprintf
shell32
CommandLineToArgvW
SHChangeNotify
user32
BeginPaint
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawTextA
EnableWindow
EndPaint
FillRect
GetClientRect
GetMessageA
GetSysColor
GetSysColorBrush
GetWindowRect
InvalidateRect
IsDialogMessageA
IsIconic
LoadCursorW
LoadIconW
MessageBoxA
MoveWindow
PeekMessageW
PostQuitMessage
RegisterClassA
SendMessageW
SetActiveWindow
SetWindowLongA
SetWindowTextW
ShowWindow
TranslateMessage
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
license.txt
-
src.zip.zip