FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
277f6d3183325119d8b6c1c5281ed094dbd75842cfd6e3d7151556dff519492d.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
277f6d3183325119d8b6c1c5281ed094dbd75842cfd6e3d7151556dff519492d.dll
Resource
win10v2004-20240704-en
Target
277f6d3183325119d8b6c1c5281ed094dbd75842cfd6e3d7151556dff519492d.exe
Size
76KB
MD5
2309f4d4bb9a5891042d92c5131336f0
SHA1
8970de387b31a9fd6a74ad8fe772c89a99201fbd
SHA256
277f6d3183325119d8b6c1c5281ed094dbd75842cfd6e3d7151556dff519492d
SHA512
4e8182508e10c1b3e0f0ac4ffeaa1f6d1d0aecee3963c5be6ece70bd684f7c9e25ae2f96785f31b61ca58c0e39922f7c382725e1ff88f053859b7b2aa16474cd
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZPfGhoxgdEvC6C36ee:c8y93KQjy7G55riF1cMo03pf+EvC6C3S
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
277f6d3183325119d8b6c1c5281ed094dbd75842cfd6e3d7151556dff519492d.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ