FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
Behavioral task
behavioral1
Sample
742d4f2cf1cb7892a0a61314c08ad45a1948b7e65967b4392e53f00be5daa101N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
742d4f2cf1cb7892a0a61314c08ad45a1948b7e65967b4392e53f00be5daa101N.dll
Resource
win10v2004-20241007-en
Target
742d4f2cf1cb7892a0a61314c08ad45a1948b7e65967b4392e53f00be5daa101N.exe
Size
80KB
MD5
a850b1e7e2f65334b257fc12881fbec0
SHA1
2b3eed075f017e855088e845410b7faf2f2dbe9c
SHA256
742d4f2cf1cb7892a0a61314c08ad45a1948b7e65967b4392e53f00be5daa101
SHA512
92836e8fd3acca68f06e97a610fe8d87d2c86e011d87b518380dda97af09c57a849239421e746806071d47ccf2a81d712b490d1c908165a12202aef1ecac762a
SSDEEP
1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEn79uIei:5dbwovEVyqgoZmZXWfIdQdRaefP4RuY
resource | yara_rule |
---|---|
sample | floxif |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
742d4f2cf1cb7892a0a61314c08ad45a1948b7e65967b4392e53f00be5daa101N.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FloodFix
FloodFix
FloodFix2
FloodFix2
crc32
crc32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ