HWID
IsPremium
Verify
VerifyLogin
Static task
static1
Behavioral task
behavioral1
Sample
FluxusLinux/FluxusLinux.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
FluxusLinux/FluxusLinux.exe
Resource
win10v2004-20230220-en
Target
FluxusLinux.zip
Size
4.4MB
MD5
dc54317647536086aa4946ea9fe73bb0
SHA1
7cc39ed2aaadd1dc6100a39700ba5f01b6726c33
SHA256
f4574886759ef38c96300dd06784b6274972a1089ba7ee754f866cdc2854116c
SHA512
975e08b7d036306d6d2149984cd83953e42c6836355bcfa640ce0c5b23c84a36541c7b7d31aeda50a5ac551f9906d2fecae84ed69ef59503f1918935f627499e
SSDEEP
98304:nKCNU+1aEnxEHmJ2XPH2Qe1F+QNsHQAezQvCYeSF0ysDYWganYh:nzU+5xHkXf0FyHyQrsDdxM
Checks for missing Authenticode signature.
resource |
---|
unpack001/FluxusLinux/FluxusAuth.dll |
unpack001/FluxusLinux/FluxusLinux.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalFree
WideCharToMultiByte
GetFileSizeEx
CreateFileA
FormatMessageA
IsProcessorFeaturePresent
WaitForMultipleObjects
PeekNamedPipe
ReadFile
GetFileType
GetStdHandle
WaitForSingleObjectEx
CloseHandle
MoveFileExA
Sleep
GetTickCount
QueryPerformanceCounter
GetEnvironmentVariableA
VerifyVersionInfoA
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
GetSystemDirectoryA
QueryPerformanceFrequency
VerSetConditionMask
SleepEx
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
OutputDebugStringW
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
SetLastError
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
CryptEncrypt
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptImportKey
CryptDestroyKey
CryptDestroyHash
GetCurrentHwProfileA
RegCloseKey
RegCreateKeyExW
RegGetValueA
CryptAcquireContextA
SysFreeString
SysAllocStringLen
SysAllocString
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exceptions@std@@YAHXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
__std_exception_copy
__std_exception_destroy
__std_terminate
_CxxThrowException
_except_handler4_common
__CxxFrameHandler3
memcpy
__std_type_info_destroy_list
memmove
memset
memchr
strrchr
strstr
strchr
__current_exception
__current_exception_context
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_errno
strerror
__sys_nerr
terminate
_initialize_onexit_table
_getpid
_invalid_parameter_noinfo_noreturn
_beginthreadex
strncmp
strncpy
tolower
isupper
isalnum
strspn
strpbrk
_strdup
strcspn
malloc
free
calloc
_callnewh
realloc
__acrt_iob_func
fgets
__stdio_common_vsprintf
fflush
fread
_open
fseek
_write
_read
_lseeki64
_close
__stdio_common_vsscanf
fputs
fwrite
fputc
fclose
feof
ftell
fopen
_stat64
_fstat64
_access
_unlink
strtol
strtoul
atoi
strtoll
_time64
_gmtime64
qsort
accept
htonl
listen
WSAStartup
__WSAFDIsSet
select
getaddrinfo
freeaddrinfo
recvfrom
sendto
gethostname
ntohl
WSAIoctl
WSASetLastError
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
bind
WSACleanup
WSAGetLastError
send
recv
closesocket
ioctlsocket
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertFreeCertificateContext
CryptStringToBinaryA
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertOpenStore
ord217
ord60
ord45
ord46
ord211
ord50
ord301
ord200
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord143
ord30
IdnToAscii
HWID
IsPremium
Verify
VerifyLogin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ