FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
45d80c7c729983bd3dfc45f5a4b50b6c5ae58b7074375525c65d90a6ba9bf6a8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
45d80c7c729983bd3dfc45f5a4b50b6c5ae58b7074375525c65d90a6ba9bf6a8.dll
Resource
win10v2004-20240508-en
Target
45d80c7c729983bd3dfc45f5a4b50b6c5ae58b7074375525c65d90a6ba9bf6a8
Size
76KB
MD5
bb3c4fdc053004357e35655f3ceb5916
SHA1
a694677fd0e0311966592c8f0957874460e66c2b
SHA256
45d80c7c729983bd3dfc45f5a4b50b6c5ae58b7074375525c65d90a6ba9bf6a8
SHA512
9f6328dee95a30fa56bf1d50af85144e91525a6b50f4eaf68e8f2ddf2480844ff7ad58b7984496d0f3800300a6d8641ad217baec4775206f248629a78e707705
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZBcbP3voV:c8y93KQjy7G55riF1cMo03/6IV
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45d80c7c729983bd3dfc45f5a4b50b6c5ae58b7074375525c65d90a6ba9bf6a8 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ