FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
180901a666c3ea1da124327a4842fee80fa0acd86109c72fe0a7fb6e31101242.dll
Resource
win7-20240903-en
Target
180901a666c3ea1da124327a4842fee80fa0acd86109c72fe0a7fb6e31101242.exe
Size
76KB
MD5
c4e7da51e9158b7a81f5ce10fe20540d
SHA1
f3129913eabab2e68307dba47d32a374890cce4d
SHA256
180901a666c3ea1da124327a4842fee80fa0acd86109c72fe0a7fb6e31101242
SHA512
aa3ed44cf24b0704c5821b0e537b5f77f6ece5dcd181b3f02381868f949d395ac28ce9890a0702ad400ed76537784e8b3cda314c02c330bafa37ecf1f3c3d88f
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z9c:c8y93KQjy7G55riF1cMo03Dc
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
180901a666c3ea1da124327a4842fee80fa0acd86109c72fe0a7fb6e31101242.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ