FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
98e05eb0476bc619ee000a1c1c45d0f33c52080907585eae68528a7b29fcbefa.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
98e05eb0476bc619ee000a1c1c45d0f33c52080907585eae68528a7b29fcbefa.dll
Resource
win10v2004-20240226-en
Target
98e05eb0476bc619ee000a1c1c45d0f33c52080907585eae68528a7b29fcbefa
Size
76KB
MD5
cd3888233af2653c3c44cdd763995f64
SHA1
d66c27d82a381dfca31b8c32a171166b35548a7c
SHA256
98e05eb0476bc619ee000a1c1c45d0f33c52080907585eae68528a7b29fcbefa
SHA512
2d1b1c3b70c6dd3936c577c76272dbad80e87df72672eb82231c64136a66665eafc5d7b4619ede790badf419ffe9bec15499e2839428a28558b106c02568da4e
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZygrtlYd:c8y93KQjy7G55riF1cMo03Htlq
Processes:
| resource | yara_rule |
|---|---|
| sample | UPX |
Detects file using ACProtect software.
Processes:
| resource | yara_rule |
|---|---|
| sample | acprotect |
Processes:
| resource | yara_rule |
|---|---|
| sample | upx |
Checks for missing Authenticode signature.
Processes:
| resource |
|---|
| 98e05eb0476bc619ee000a1c1c45d0f33c52080907585eae68528a7b29fcbefa |
| unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ