FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
79db64e39d2b01da2ba5671c0cc8a0e602f979f85b40fcc3efa997a98ad88998.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
79db64e39d2b01da2ba5671c0cc8a0e602f979f85b40fcc3efa997a98ad88998.dll
Resource
win10v2004-20240426-en
Target
79db64e39d2b01da2ba5671c0cc8a0e602f979f85b40fcc3efa997a98ad88998
Size
76KB
MD5
f8f9af31f8eb0770a48fabd310648333
SHA1
7d390e7e64e38cbfe482ac078769a5801e91b5ac
SHA256
79db64e39d2b01da2ba5671c0cc8a0e602f979f85b40fcc3efa997a98ad88998
SHA512
5e59ca7561f8de2ee9f379d691ad0fd9d3f32b63058257a5954a787d51d97f43cd2147e4cc267bb552615f18e6f168b99115b1975409640d8e690e393df063ca
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZADGDsCtR:c8y93KQjy7G55riF1cMo03yqgQR
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
79db64e39d2b01da2ba5671c0cc8a0e602f979f85b40fcc3efa997a98ad88998 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ