FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
c79356ad964e9dad820b0e6e91d7d93446e06817a60ee0e1ab4a12ed92c42c66N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c79356ad964e9dad820b0e6e91d7d93446e06817a60ee0e1ab4a12ed92c42c66N.dll
Resource
win10v2004-20240802-en
Target
c79356ad964e9dad820b0e6e91d7d93446e06817a60ee0e1ab4a12ed92c42c66N.exe
Size
76KB
MD5
b89311f8fb23201cf6d99c1d0c771140
SHA1
fd300ef050b550cb664c9df31c10b85054ad465b
SHA256
c79356ad964e9dad820b0e6e91d7d93446e06817a60ee0e1ab4a12ed92c42c66
SHA512
d5c17cb1bfb6a1dfedf7352f994985a4664a6f9d351ec5c28410b223ec8f6aa43666a2196d1b29e1d2d0ea5f73ee88316071dfb8a6c917a8942364c7aabb8543
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZihmO8l:c8y93KQjy7G55riF1cMo03Fl
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c79356ad964e9dad820b0e6e91d7d93446e06817a60ee0e1ab4a12ed92c42c66N.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ