FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
daa6dd566d724e4cb43595a93a54f938ec6c92f2de259d9b937122fe11a510e1.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
daa6dd566d724e4cb43595a93a54f938ec6c92f2de259d9b937122fe11a510e1.dll
Resource
win10v2004-20240508-en
Target
daa6dd566d724e4cb43595a93a54f938ec6c92f2de259d9b937122fe11a510e1
Size
76KB
MD5
5b1eed83aef136ddc77516cadbb9be13
SHA1
3b66d8b13a755865dadaba05ebd07d5c383c6861
SHA256
daa6dd566d724e4cb43595a93a54f938ec6c92f2de259d9b937122fe11a510e1
SHA512
e849872fad9fa7cdcd8eefec71368938bb4f6f36f22c0d794a81b2a8a2288f789f96ae2aa95c381f7e6adbc650dc4370c2b4f3f51d38a57ebd21695fbd728859
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z8A3Wz:c8y93KQjy7G55riF1cMo03N3y
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
daa6dd566d724e4cb43595a93a54f938ec6c92f2de259d9b937122fe11a510e1 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ