FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
6957e069ddd7d8ee3dbc07f6a818025ff563a88af9dbc8c45d344b9f17aa3a9cN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6957e069ddd7d8ee3dbc07f6a818025ff563a88af9dbc8c45d344b9f17aa3a9cN.dll
Resource
win10v2004-20240802-en
Target
6957e069ddd7d8ee3dbc07f6a818025ff563a88af9dbc8c45d344b9f17aa3a9cN
Size
76KB
MD5
c0d701245fa6bd4cdf47731000d538d0
SHA1
4a2c4f89de606ec1c6665be32b23c728f0595d30
SHA256
6957e069ddd7d8ee3dbc07f6a818025ff563a88af9dbc8c45d344b9f17aa3a9c
SHA512
31483c8956bb7675520ab989257b9378243333aa112d12af97d4763a55d084f5cf52f9266cb5338038b731ff355811cbaf93f9fd135bec4d33ca1c0cf468ed87
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z4L2tkSG:c8y93KQjy7G55riF1cMo03ASG
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6957e069ddd7d8ee3dbc07f6a818025ff563a88af9dbc8c45d344b9f17aa3a9cN |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ