TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
ϲƵع/ϲFMרع.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
ϲƵع/ϲFMרع.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral3
Sample
ϲƵع/.url
Resource
win7-20230621-en
Behavioral task
behavioral4
Sample
ϲƵع/.url
Resource
win10v2004-20230621-en
Target
5c0d34d5678feece4ce98c404905bef3b5a3c3c927f85da497988e7a57fffefb
Size
838KB
MD5
4f725e2c63b0dc606fa0424ea06b24d8
SHA1
405c36b76c40169b2ab2eca054cfa37b74346bb2
SHA256
5c0d34d5678feece4ce98c404905bef3b5a3c3c927f85da497988e7a57fffefb
SHA512
a86ace8e1e946f99512a54690e21c74f8f6d2dfcd4a8d9a064bc43a0d65a4a360b9ea95b9ee9f2c72f1d5260ca9c9c38658b5478e2642c00f4e699dbafbf37bc
SSDEEP
24576:t7BrwUlkCgUHkR8AZ3Q0j8EZjsGifL2ZdogSy:tVrwUlkZ8vB0RqHfSl
resource | yara_rule |
---|---|
static1/unpack001/ϲƵع/ϲFMרع.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/ϲƵع/ϲFMרع.exe |
unpack002/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ