LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
545cd65eb072a4494bf4b0b6f669723a9c916ceda6267ee7e45071e345925e76.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
545cd65eb072a4494bf4b0b6f669723a9c916ceda6267ee7e45071e345925e76.exe
Resource
win10v2004-20230220-en
Target
545cd65eb072a4494bf4b0b6f669723a9c916ceda6267ee7e45071e345925e76
Size
1.3MB
MD5
4b6504cb96cca0be4f53c47f70fba367
SHA1
5c6faac403015c6ab5dc163cbef939b0d15b1328
SHA256
545cd65eb072a4494bf4b0b6f669723a9c916ceda6267ee7e45071e345925e76
SHA512
0240840c37b1ff5657e0c2e15ee6423f2d4f0629bf6cdd909c717c1e345925824fd39c6714358a152736e43b360d042155edb58467d5ffc487c75dc7b55b4878
SSDEEP
24576:sVP4iQzePuruuXj/cm8k+qtmfuycz1EATiS62TH/IlmcWlTYWys:sWBj/cm8k+XfuysTXAuTYWys
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ