FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
d1b9fb6452c6f4b8f7f4351a8856c12d006e8bb8ccde17a2289986a7c7faff8d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d1b9fb6452c6f4b8f7f4351a8856c12d006e8bb8ccde17a2289986a7c7faff8d.dll
Resource
win10v2004-20240508-en
Target
d1b9fb6452c6f4b8f7f4351a8856c12d006e8bb8ccde17a2289986a7c7faff8d
Size
76KB
MD5
794c59e747216ecc5d3f3d959a42fc50
SHA1
d211aff7af6a2f491c97eabd297165dc5701f98b
SHA256
d1b9fb6452c6f4b8f7f4351a8856c12d006e8bb8ccde17a2289986a7c7faff8d
SHA512
217036b61040e893f951f2116ebe6565213944e4dba4b0a149540697c3a621b0eda70ff9d58df7d496348b86576881ba0127b7f4f06dd8673a03eb0450c72bac
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZZXLX7Ma+9zU:c8y93KQjy7G55riF1cMo03XJQU
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d1b9fb6452c6f4b8f7f4351a8856c12d006e8bb8ccde17a2289986a7c7faff8d |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ