FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
94c37902b1cda00a7bf6d6ea23de1873b058987b3927709e1c7cd0f705c36078.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
94c37902b1cda00a7bf6d6ea23de1873b058987b3927709e1c7cd0f705c36078.dll
Resource
win10v2004-20240226-en
Target
94c37902b1cda00a7bf6d6ea23de1873b058987b3927709e1c7cd0f705c36078
Size
76KB
MD5
509f505a1012aed75790be68f09b4a4f
SHA1
78d9c76fa50a5472b8083ccbf6766c502661c536
SHA256
94c37902b1cda00a7bf6d6ea23de1873b058987b3927709e1c7cd0f705c36078
SHA512
f43f7679c476f43fb7fde375894b5aec15891d0b31997a4b040076c3edcba7826b7a91de6d00651734ef00d92914f4d6253aa5815f67bba10946ae803e880c1b
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z5abVu:c8y93KQjy7G55riF1cMo03gM
Processes:
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
Processes:
resource | yara_rule |
---|---|
sample | acprotect |
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
94c37902b1cda00a7bf6d6ea23de1873b058987b3927709e1c7cd0f705c36078 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ