FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
9bdc6e839b40c63e568a161b7d19dea5ef9c755e141f3fadd7a222827e955704N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9bdc6e839b40c63e568a161b7d19dea5ef9c755e141f3fadd7a222827e955704N.dll
Resource
win10v2004-20241007-en
Target
9bdc6e839b40c63e568a161b7d19dea5ef9c755e141f3fadd7a222827e955704N.exe
Size
76KB
MD5
55e7840d01b7ec0e95393eeb5752fc60
SHA1
0391b4c9f12dc708804a828e856f16ed35ff741a
SHA256
9bdc6e839b40c63e568a161b7d19dea5ef9c755e141f3fadd7a222827e955704
SHA512
bdb0240190a1520fe0ed907a7d67c02f0cb8741cf1e2bd61bb1bfac6718182dad75c34dc426cae92448bb5374fc1d8a1778fb791343cde926cf37944e6503538
SSDEEP
1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZpC42cHwPqTmIR:c8y93KQjy7G55riF1cMo03u4rwiTDR
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9bdc6e839b40c63e568a161b7d19dea5ef9c755e141f3fadd7a222827e955704N.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ