LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
Behavioral task
behavioral1
Sample
Run.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Run.exe
Resource
win10v2004-20230703-en
Target
Run.zip
Size
396KB
MD5
807fd54bb3258170bd203bdc47512921
SHA1
278703f42fb585fa301f38aee5d5bf5d04ac1250
SHA256
641a66320976d1b591ad66ff9ad8bae343b2fdff366d08c1735b6eeef8202185
SHA512
b912ee803af0516090636b94eb22c34ea0a020f02520fa472c2615c245903e5219099ba3a0ed9927f345b240adc5abc89691a2b6839e8559c416af8242529ab9
SSDEEP
6144:6aEWSu0hmqAEwxjGpP9G4YXUVeCk3mHdcz1i62URbj5NSGLHa62HUe/ewJ+xSthJ:JEZujqA7v4AXpqczmURbj7a61wI2B
resource | yara_rule |
---|---|
static1/unpack001/Run.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Run.exe |
unpack002/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ