FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
7b289027deece10e56cdaec0183b93f07a5febc7c5c2b79e957b10f30bd7a495.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7b289027deece10e56cdaec0183b93f07a5febc7c5c2b79e957b10f30bd7a495.dll
Resource
win10v2004-20240508-en
Target
7b289027deece10e56cdaec0183b93f07a5febc7c5c2b79e957b10f30bd7a495
Size
76KB
MD5
d56a636ea7e82b4ce83be6f2e76259da
SHA1
a7fc46128a2ed286f5a0c82a23e2ce315f08d1c1
SHA256
7b289027deece10e56cdaec0183b93f07a5febc7c5c2b79e957b10f30bd7a495
SHA512
f5e242bbbf36679bb8cb9225558e48f28a17a2db73b64bc4cfa22d60a81a9e31cfda52229cdc14c8c0c89a4acb44de6a6a90dbf90bef4981da66e46ffb9350d7
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZbkLHU6:c8y93KQjy7G55riF1cMo03Zg
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7b289027deece10e56cdaec0183b93f07a5febc7c5c2b79e957b10f30bd7a495 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ