FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
e6e43a46a6a394ae1d48dc3db6e0884ec6434408ddfc626435673e6d7e41558d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e6e43a46a6a394ae1d48dc3db6e0884ec6434408ddfc626435673e6d7e41558d.dll
Resource
win10v2004-20240412-en
Target
e6e43a46a6a394ae1d48dc3db6e0884ec6434408ddfc626435673e6d7e41558d
Size
76KB
MD5
fdfb1ae4f2ee65324129092032a8ffa7
SHA1
c39947e3f79b3aa9e4c5160e062f11f89be32f6f
SHA256
e6e43a46a6a394ae1d48dc3db6e0884ec6434408ddfc626435673e6d7e41558d
SHA512
bc6a541f6189145b013a1921d7391a37a7abd22e054ebb46a8bcfe3d19efa34ebd223a27a96e1dce67c734999a9e79694a7cf0aab34cd85d0478ce1f033fd2a5
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z2GHDOtKBm5e:c8y93KQjy7G55riF1cMo03DHDOtKBm5e
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e6e43a46a6a394ae1d48dc3db6e0884ec6434408ddfc626435673e6d7e41558d |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ