BuyShop
ChangeSpeed
Gather
GetBackpackIndex
GetBackpackPtr
GetMapData
ReBackpack
SelectMsgbox
SendMagic
UseBackpack
Behavioral task
behavioral1
Sample
challange_Benign_fa92364e3c5f4bbd38b0269265d11f0eb126c022069d46b2ba047d5971f70308.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
challange_Benign_fa92364e3c5f4bbd38b0269265d11f0eb126c022069d46b2ba047d5971f70308.dll
Resource
win10v2004-20230703-en
Target
challange_Benign_fa92364e3c5f4bbd38b0269265d11f0eb126c022069d46b2ba047d5971f70308.exe
Size
67KB
MD5
5824bfe6fcacc09db94e59802aee9bd5
SHA1
b3c3e81da3a4dad00edcf9453b651f1eae352d77
SHA256
fa92364e3c5f4bbd38b0269265d11f0eb126c022069d46b2ba047d5971f70308
SHA512
eaebfe2e78c8b0849bfdc6ccde2cba6d17c8ac65b009ac13ff5154b4e7c67fed5f0d7a3c5b78b3a66a5efa6578752f1c68573f498a5faf417a921840533171f6
SSDEEP
1536:UelkhGwXHG0Ox8Oj20i1hMXXC6aVyV7DEyDPGzs9rOLw91S9yN:U6kJXNBApn1j1gyjHR591SgN
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
challange_Benign_fa92364e3c5f4bbd38b0269265d11f0eb126c022069d46b2ba047d5971f70308.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
BuyShop
ChangeSpeed
Gather
GetBackpackIndex
GetBackpackPtr
GetMapData
ReBackpack
SelectMsgbox
SendMagic
UseBackpack
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ