FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
38ef0d4db0c606e3689cd279a287e234ef5680328fb055b3b7d51e150e01298eN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38ef0d4db0c606e3689cd279a287e234ef5680328fb055b3b7d51e150e01298eN.dll
Resource
win10v2004-20241007-en
Target
38ef0d4db0c606e3689cd279a287e234ef5680328fb055b3b7d51e150e01298eN.exe
Size
76KB
MD5
42cacc0998656c02ebe940909e6e0500
SHA1
3db3a5176d344420e9e6ec06c9a7eb20bf820af9
SHA256
38ef0d4db0c606e3689cd279a287e234ef5680328fb055b3b7d51e150e01298e
SHA512
410c02da8e998b6a2fba5a49afbf8c890192d9de60d858f1fb9df2c5f12b97182033e306552e0e92a1bf8a9f4cf7d6db3a8e1b59a80c80ba35d606f66c337d5b
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZvAGw+ei:c8y93KQjy7G55riF1cMo03mu
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38ef0d4db0c606e3689cd279a287e234ef5680328fb055b3b7d51e150e01298eN.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ