LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
a0101a560e1b33fcce38d7b06af4d4b813da0d8f24cccb16c0a9ebfb07630cc6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a0101a560e1b33fcce38d7b06af4d4b813da0d8f24cccb16c0a9ebfb07630cc6.exe
Resource
win10v2004-20230220-en
Target
a0101a560e1b33fcce38d7b06af4d4b813da0d8f24cccb16c0a9ebfb07630cc6
Size
5.2MB
MD5
fcfd4866c5b186a917e98354cf285259
SHA1
6defb7cb76ef8d3928fcc5d9755caaca2408e719
SHA256
a0101a560e1b33fcce38d7b06af4d4b813da0d8f24cccb16c0a9ebfb07630cc6
SHA512
98694caaee6958e62522e38b0dfb71d1b7dcb06ad71db8eefef919da64f912a9a7390cff2476e443a4b8e678960294e363f6be027b56d2bdd1618c686a4a5c1f
SSDEEP
98304:Meprj48BA5HHDlnZzfzluh7nIhjHGvSfWU7EabP3Sr1a0Prf4B:NFseoBzlA7nIhjHGvS+UwabPn0A
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ