FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
05aa085d296017eeb8c26f9d0cf0d4251a494d11f29ae2c1941d6c8af24aed54.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05aa085d296017eeb8c26f9d0cf0d4251a494d11f29ae2c1941d6c8af24aed54.dll
Resource
win10v2004-20240426-en
Target
05aa085d296017eeb8c26f9d0cf0d4251a494d11f29ae2c1941d6c8af24aed54
Size
76KB
MD5
d52981ec00447abaabd7e61c62b4082c
SHA1
6f5d3951ca533e34a85402e00a7ce6c12fa1866f
SHA256
05aa085d296017eeb8c26f9d0cf0d4251a494d11f29ae2c1941d6c8af24aed54
SHA512
824221829864b640e1e72e99110633aa1245d33718e8c7599f9cdfcf44e839627727ff3b5cd7c4e4a7eabcad05b7f2d9ed037e970b7407de340a98c20bab6ed5
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zcgvj+wr:c8y93KQjy7G55riF1cMo03P
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
05aa085d296017eeb8c26f9d0cf0d4251a494d11f29ae2c1941d6c8af24aed54 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ