jump_fcontext
make_fcontext
Behavioral task
behavioral1
Sample
49e13bbda51cc7bc25fdb14dc6b9d461bcab8e8e4943f86bdf0c50b1c15b7568.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
49e13bbda51cc7bc25fdb14dc6b9d461bcab8e8e4943f86bdf0c50b1c15b7568.exe
Resource
win10v2004-20220901-en
Target
49e13bbda51cc7bc25fdb14dc6b9d461bcab8e8e4943f86bdf0c50b1c15b7568
Size
901KB
MD5
330e4e0dae0bcb74da28493897cc2924
SHA1
6cb76f52210df945c5812152e657c53474286f94
SHA256
49e13bbda51cc7bc25fdb14dc6b9d461bcab8e8e4943f86bdf0c50b1c15b7568
SHA512
4b5b2a2141659a8445faa8e13b88333140c5f6d899762338751540e4757ae2a7682079dbd12b49677c72a546f12df4497530ce70cd747271bc14d77e4116b8f0
SSDEEP
24576:70Oxu5unC5qYFpSx4T0r0/fQxq042M1qPN1KU4t:txu5uC8YFpSjGxH2nPN1
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
jump_fcontext
make_fcontext
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ