FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
2923edb35f12b836a1b7e692c3098f0d0d0e220f63e0113af503d92372a3d7c2.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2923edb35f12b836a1b7e692c3098f0d0d0e220f63e0113af503d92372a3d7c2.dll
Resource
win10v2004-20240419-en
Target
2923edb35f12b836a1b7e692c3098f0d0d0e220f63e0113af503d92372a3d7c2
Size
80KB
MD5
6947903ad39ba07fe215fea86f437a2d
SHA1
087fca4b2ee09ee6d2091030943e8a0cea71ee5d
SHA256
2923edb35f12b836a1b7e692c3098f0d0d0e220f63e0113af503d92372a3d7c2
SHA512
7c08cbbc5d09b43dc84aff808b38c307d5203b5e01cd77c742d19d55b4fee683c1f472387b871af102c159d99fe5a52142d0c4e93fd0ba24af49a37be7ece820
SSDEEP
1536:uIcs6msUvrh8ErMInQ+4cw9NVWfjaRkE4LEl8B60Y2lfxxHZPE8kcm1:dcs6v68Erj3w9zWf+SEFuk0/pfPgc+
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2923edb35f12b836a1b7e692c3098f0d0d0e220f63e0113af503d92372a3d7c2 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ