FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
4c073700ec25f95614da46578836356cec213c88a40bb5cb6a91a64996f32e7c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4c073700ec25f95614da46578836356cec213c88a40bb5cb6a91a64996f32e7c.dll
Resource
win10v2004-20240508-en
Target
4c073700ec25f95614da46578836356cec213c88a40bb5cb6a91a64996f32e7c
Size
76KB
MD5
286412f017d72236b06635c210b28887
SHA1
0f8c62fb36fdf1fa9ba3a8f9e9149c2f72c129a5
SHA256
4c073700ec25f95614da46578836356cec213c88a40bb5cb6a91a64996f32e7c
SHA512
b7fb7c5ac77c1830527a8be182bca526bc3677bbd23bda75d97202292ab49382537242bca05b4bf803e448871ece8ebb86b12afbe9dc9ff29869b165edd99f91
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZyH+ZTCQT:c8y93KQjy7G55riF1cMo03ge4I
resource | yara_rule |
---|---|
sample | floxif |
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4c073700ec25f95614da46578836356cec213c88a40bb5cb6a91a64996f32e7c |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ