FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
8485b2830467b171c15bb4460bd639d5d9d31a62f4dfcac61f6f84c4ec6f9ccd.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8485b2830467b171c15bb4460bd639d5d9d31a62f4dfcac61f6f84c4ec6f9ccd.dll
Resource
win10v2004-20240704-en
Target
8485b2830467b171c15bb4460bd639d5d9d31a62f4dfcac61f6f84c4ec6f9ccd
Size
80KB
MD5
e1b63862c0fbc7cf6c1624fc672879ab
SHA1
6b8137323f0a04dab3b1e6ea573188ed5c8c5e88
SHA256
8485b2830467b171c15bb4460bd639d5d9d31a62f4dfcac61f6f84c4ec6f9ccd
SHA512
8018c6575eabf58e1ea96cc6681ad532f51b91763cd21d78648067179c960da11ee5c1f5fec5a2feaccd730ec739c07b1ec5de7cbe63c5d3f63144ca80258bbb
SSDEEP
1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEXM:5dbwovEVyqgoZmZXWfIdQdRaefPqM
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8485b2830467b171c15bb4460bd639d5d9d31a62f4dfcac61f6f84c4ec6f9ccd |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ