LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
90f746536ccca84a9380a4a3a757e4ad9ff3aa58988ed722f83f41180175e83b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
90f746536ccca84a9380a4a3a757e4ad9ff3aa58988ed722f83f41180175e83b.exe
Resource
win10v2004-20230220-en
Target
90f746536ccca84a9380a4a3a757e4ad9ff3aa58988ed722f83f41180175e83b
Size
453KB
MD5
36829ced060adfdf6c376a93292eba4a
SHA1
1eb21afd6a69ff1684b23793841b5c33d7e6cf78
SHA256
90f746536ccca84a9380a4a3a757e4ad9ff3aa58988ed722f83f41180175e83b
SHA512
fdb0c0ac3c10e9b753f48df2601efa9c8669eb1317e466b3d849acd1f8e30b03cd4f1a6409ff29f4ec566959e816220db12233d6fc448891527a28fd0f1fca19
SSDEEP
12288:4NVSegthIqepdMviQzePlMTzrQMOHOXnjI0cEcWg:+VP4iQzePuruuXj/c3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
90f746536ccca84a9380a4a3a757e4ad9ff3aa58988ed722f83f41180175e83b |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ