FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
745f0bd276d755490b20840c8b50682b621087f5cc18bc8bb6831d1a2613e884.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
745f0bd276d755490b20840c8b50682b621087f5cc18bc8bb6831d1a2613e884.dll
Resource
win10v2004-20240508-en
Target
745f0bd276d755490b20840c8b50682b621087f5cc18bc8bb6831d1a2613e884
Size
76KB
MD5
d047d0a9188a6a04140781e9f2588948
SHA1
6f622a2a15c3242ffb6c2b655d868cd401adfdfe
SHA256
745f0bd276d755490b20840c8b50682b621087f5cc18bc8bb6831d1a2613e884
SHA512
b8fbdbac5e031d6e5cfdda10df500e105dc674194d383cb89bb98e4eb05feb04936b054000b79f333a6d49f4694ef6a72cbafd59218dcf636d823919ed105798
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZJSyKtwJ:c8y93KQjy7G55riF1cMo03jK2J
Processes:
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
Processes:
resource | yara_rule |
---|---|
sample | acprotect |
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
745f0bd276d755490b20840c8b50682b621087f5cc18bc8bb6831d1a2613e884 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ