FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
69387e1d13aaa97aed1c23716bb1473b571916c739d5a86addcc4e11ee95c34c.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
69387e1d13aaa97aed1c23716bb1473b571916c739d5a86addcc4e11ee95c34c.dll
Resource
win10v2004-20240802-en
Target
69387e1d13aaa97aed1c23716bb1473b571916c739d5a86addcc4e11ee95c34c
Size
76KB
MD5
99554a1eee30892349e8adb860e79971
SHA1
7ecca7a66fcb28837f1d9ba00cd83ce95144c5e5
SHA256
69387e1d13aaa97aed1c23716bb1473b571916c739d5a86addcc4e11ee95c34c
SHA512
a8ee8f59229b8c610ddc4da170482c36a7a38e552863bdc2f39981786ab7d3af9a8a99dae15dd25de4486727cd658d59b6d5c4cfdd129b6123759c7b62c2900b
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZZqvERNC:c8y93KQjy7G55riF1cMo03KMRNC
| resource | yara_rule |
|---|---|
| sample | floxif |
Detects file using ACProtect software.
| resource | yara_rule |
|---|---|
| sample | acprotect |
| resource | yara_rule |
|---|---|
| sample | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| 69387e1d13aaa97aed1c23716bb1473b571916c739d5a86addcc4e11ee95c34c |
| unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ