FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
b298f0ea290f97d3fd7b13d72b8272291e800e3c2cc7b49f2eb3282c3a6d2deeN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b298f0ea290f97d3fd7b13d72b8272291e800e3c2cc7b49f2eb3282c3a6d2deeN.dll
Resource
win10v2004-20241007-en
Target
b298f0ea290f97d3fd7b13d72b8272291e800e3c2cc7b49f2eb3282c3a6d2deeN.exe
Size
76KB
MD5
728b2d9d0b7b8c925f6e4d4907006720
SHA1
9fa6c429ba8ff883f2977d721fd4b9ad9c11b5fe
SHA256
b298f0ea290f97d3fd7b13d72b8272291e800e3c2cc7b49f2eb3282c3a6d2dee
SHA512
2c86afd9db794f985e84c89d5a520865103b885122915def43b680814d74318d57e52e7e26e9102dab2250cbd35b8f072dc7a02b18f30eb762388a3e04a219a4
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZU9kQc7Z:c8y93KQjy7G55riF1cMo036k
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b298f0ea290f97d3fd7b13d72b8272291e800e3c2cc7b49f2eb3282c3a6d2deeN.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ