LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
Behavioral task
behavioral1
Sample
b803f5b0f654fcd53bf55e0ba5a030f5b696b2cd137fda56c83c9343a1915cc2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b803f5b0f654fcd53bf55e0ba5a030f5b696b2cd137fda56c83c9343a1915cc2.exe
Resource
win10v2004-20230220-en
Target
b803f5b0f654fcd53bf55e0ba5a030f5b696b2cd137fda56c83c9343a1915cc2
Size
1.9MB
MD5
43e51a115eb2d11f87b8abfb75bd6e33
SHA1
772c7e90920e3092c064524e36648ea62ff11f61
SHA256
b803f5b0f654fcd53bf55e0ba5a030f5b696b2cd137fda56c83c9343a1915cc2
SHA512
61cb3e1450ff8a2d9570724cfe989f1439fee9d7194b8826ea9b2dd2e1c523f6a7124d4202a2e39783a88cdbfd530b6c6fc002798383dcb8c33bac828a1c55ef
SSDEEP
49152:VZAD1eb3KJrHSJJ21G2m2rgrBgGiEXHyBd:vAD1eLKpyD2qrB4wSBd
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ