FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
514459e8a9defc42f18590377166d2381e60f4dd2128d4608e4cc3a48b0714f3N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
514459e8a9defc42f18590377166d2381e60f4dd2128d4608e4cc3a48b0714f3N.dll
Resource
win10v2004-20241007-en
Target
514459e8a9defc42f18590377166d2381e60f4dd2128d4608e4cc3a48b0714f3N.exe
Size
76KB
MD5
f470b4a45e7c681aa43b0461e2eaee30
SHA1
a8c8e898ddc65fa1326879daada9f4d8f5a49a68
SHA256
514459e8a9defc42f18590377166d2381e60f4dd2128d4608e4cc3a48b0714f3
SHA512
a795613f97fbfac5c891b3c3c2b6684a6ac6b35912c2e10da383e28faf18f91f3edce75b7e3eba23f28207ca797b8cf7a40f142110c3eec1b9337e3fb2e6b7eb
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZTXrQ2K:c8y93KQjy7G55riF1cMo03y
Processes:
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
Processes:
resource | yara_rule |
---|---|
sample | acprotect |
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
514459e8a9defc42f18590377166d2381e60f4dd2128d4608e4cc3a48b0714f3N.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ