FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
57caf824f39ff2ac1b651c58e0453f77f0d0c91c3e4cc82822b3a8a945690a4b.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
57caf824f39ff2ac1b651c58e0453f77f0d0c91c3e4cc82822b3a8a945690a4b.dll
Resource
win10v2004-20240426-en
Target
57caf824f39ff2ac1b651c58e0453f77f0d0c91c3e4cc82822b3a8a945690a4b
Size
76KB
MD5
a65d5275631548d444c7f12b30f423a4
SHA1
6810c02ef12890bca0a61a6543df3eb39cf2b6f8
SHA256
57caf824f39ff2ac1b651c58e0453f77f0d0c91c3e4cc82822b3a8a945690a4b
SHA512
66c832043f462de3989b8660b370d4e77641d257de282cddf745e98263316a93e776a8bf051d8fc961e32ce29407d2ee674e7191aabf4db95d4f472079101acf
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z2d+J:c8y93KQjy7G55riF1cMo034+J
Processes:
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
Processes:
resource | yara_rule |
---|---|
sample | acprotect |
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
57caf824f39ff2ac1b651c58e0453f77f0d0c91c3e4cc82822b3a8a945690a4b |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ